--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c"}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:07:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55556","PortSpecifier":{"PortValue":55556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21f3267e-707a-4864-9a3a-c2108ee032c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55556","PortSpecifier":{"PortValue":55556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200038,"nanos":38136086},"http":{"id":"21f3267e-707a-4864-9a3a-c2108ee032c7","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f3267e-707a-4864-9a3a-c2108ee032c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43932","PortSpecifier":{"PortValue":43932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43932","PortSpecifier":{"PortValue":43932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200038,"nanos":116046311},"http":{"id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e7308c1-53e1-41ad-a0e2-467cbd169df9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","method":"GET","path":"/maas-api/v1/api-keys/750faf53-0d74-4806-aab4-4e1ccd91c090","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200038,"nanos":184254357},"http":{"id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","method":"GET","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/750faf53-0d74-4806-aab4-4e1ccd91c090",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/750faf53-0d74-4806-aab4-4e1ccd91c090",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8fdf555-21bd-4a16-8d70-5fa08902e433","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43940","PortSpecifier":{"PortValue":43940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","method":"GET","path":"/maas-api/v1/api-keys/044227bc-e3ed-43df-8ecc-71d9a041eaad","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43940","PortSpecifier":{"PortValue":43940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200038,"nanos":246683967},"http":{"id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","method":"GET","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044227bc-e3ed-43df-8ecc-71d9a041eaad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044227bc-e3ed-43df-8ecc-71d9a041eaad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6a51d1-e603-4ddb-9aff-7a4f22322c74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56442","PortSpecifier":{"PortValue":56442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56442","PortSpecifier":{"PortValue":56442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200055,"nanos":857940986},"http":{"id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4814ca-e0dc-44ff-a738-1fb674d32096","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43836","PortSpecifier":{"PortValue":43836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43836","PortSpecifier":{"PortValue":43836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200055,"nanos":902565503},"http":{"id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6b8e74-af82-4b32-a2bf-47ef38fc2842","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200055,"nanos":947725557},"http":{"id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","method":"GET","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GUPAP46IMk37VZnd_wgSTI7DRG0nFLNEyqOHKgKhKU1rWJysd6QGR8TW5Wh7"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GUPAP46IMk37VZnd_wgSTI7DRG0nFLNEyqOHKgKhKU1rWJysd6QGR8TW5Wh7\"}"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1399aacf-fb78-4ee5-a28b-43c1779a39bb","keyName":"e2e-auth-iso-a-263b06","subscription":"e2e-auth-iso-08d97f","tenant":"e2e-shared-a-046938","userId":"1399aacf-fb78-4ee5-a28b-43c1779a39bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-08d97f"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"847e22c6-bdc1-44a1-a61f-812d5d51080a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b278929-b552-41fa-88c5-b964c2db93d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200073,"nanos":423396919},"http":{"id":"2b278929-b552-41fa-88c5-b964c2db93d7","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b278929-b552-41fa-88c5-b964c2db93d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200073,"nanos":463867196},"http":{"id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b76c9c0a-fe66-4f75-b75c-61a2d3c6a0fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51666","PortSpecifier":{"PortValue":51666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51666","PortSpecifier":{"PortValue":51666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200073,"nanos":501400731},"http":{"id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","method":"GET","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UW6zwmW6C8spYyye_c9CdBmDbWNUSUu3sBRxMj5kVxVpw6Zvtth3VxIiPHZt"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UW6zwmW6C8spYyye_c9CdBmDbWNUSUu3sBRxMj5kVxVpw6Zvtth3VxIiPHZt\"}"}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T11:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8c4d4c-7feb-47b1-bc09-986f5e7c558e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200090,"nanos":667735883},"http":{"id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d94e28-0cb8-48cc-a648-e904ff625ebc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47724","PortSpecifier":{"PortValue":47724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8735e171-c0a3-48dc-8be8-062737df38bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47724","PortSpecifier":{"PortValue":47724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200090,"nanos":709922331},"http":{"id":"8735e171-c0a3-48dc-8be8-062737df38bc","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8735e171-c0a3-48dc-8be8-062737df38bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34778","PortSpecifier":{"PortValue":34778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34778","PortSpecifier":{"PortValue":34778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200090,"nanos":750089396},"http":{"id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69a662d8-b897-4cb5-a31d-63c10fcadbc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200090,"nanos":807260179},"http":{"id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b0b42a-d80c-4a4b-8fb1-197d34c9f174","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37510","PortSpecifier":{"PortValue":37510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c33ebef-c9d9-4179-a257-1474d532c202","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37510","PortSpecifier":{"PortValue":37510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200107,"nanos":998988140},"http":{"id":"6c33ebef-c9d9-4179-a257-1474d532c202","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c33ebef-c9d9-4179-a257-1474d532c202","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200108,"nanos":36875085},"http":{"id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b9b026-ca3c-4fb6-a265-a89ba20a6603","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88491917-5116-419c-a968-bf73600fcceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88491917-5116-419c-a968-bf73600fcceb","method":"GET","path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88491917-5116-419c-a968-bf73600fcceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200108,"nanos":69534720},"http":{"id":"88491917-5116-419c-a968-bf73600fcceb","method":"GET","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88491917-5116-419c-a968-bf73600fcceb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88491917-5116-419c-a968-bf73600fcceb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88491917-5116-419c-a968-bf73600fcceb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88491917-5116-419c-a968-bf73600fcceb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88491917-5116-419c-a968-bf73600fcceb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37524","PortSpecifier":{"PortValue":37524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16259512-6693-41c5-90ce-9843d06fa6e7","method":"GET","path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37524","PortSpecifier":{"PortValue":37524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200108,"nanos":101435284},"http":{"id":"16259512-6693-41c5-90ce-9843d06fa6e7","method":"GET","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/598e6e0b-cc5c-456f-8781-44b54387671f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16259512-6693-41c5-90ce-9843d06fa6e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40900","PortSpecifier":{"PortValue":40900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40900","PortSpecifier":{"PortValue":40900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200125,"nanos":508284459},"http":{"id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a837e4e1-8208-4cb9-aaf1-df52e1db08da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36334","PortSpecifier":{"PortValue":36334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36334","PortSpecifier":{"PortValue":36334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200125,"nanos":545973702},"http":{"id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/auth-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2a75db-54ef-46ac-98f9-01d55e3b100e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40902","PortSpecifier":{"PortValue":40902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40902","PortSpecifier":{"PortValue":40902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200125,"nanos":587758302},"http":{"id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YJ7nohvJ3xrXHd3H_XaS0DH9TROfnFOiYDhfvcDfQzHRnSL8Ma5oO1l4Pdbz"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YJ7nohvJ3xrXHd3H_XaS0DH9TROfnFOiYDhfvcDfQzHRnSL8Ma5oO1l4Pdbz\"}"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc2419be-a756-4a53-9ba0-79756cabbd48","keyName":"e2e-auth-iso-a-dd6b7b","subscription":"e2e-auth-iso-193459","tenant":"e2e-shared-a-046938","userId":"cc2419be-a756-4a53-9ba0-79756cabbd48","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/auth-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-193459"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:08:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3476b26d-4e68-4a05-9c85-264a7b3cce97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c08a4a65608cb1371af5c0e0ddc6db79a59b45d1c9606baa79870342eae5ffc"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1758ff250b6aca0e50ff4814a71f6ea7a36f250d167b3aa5d9823f23315803d"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e466d7583c652a0b2000f20460f582268a46aa0c8910eae654201f3e9860e739"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/308d3123ce654f6ce63b462778b09b9fa7f998dbea0ef33662ffa4769edd18b5"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec3ce51dee7d93ff7b588ad48e7a1ea0e027b1a43cc57540630b963c3f03a80f"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9549af3ab40477980e1a9b9b48fcc4b268ecad0de95602995312c53e59a8fcae"}
{"level":"info","ts":"2026-07-16T11:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f18245486e8c8bbfd4235ee0da7029781993fb0f239f4c1af9020dc8127fbc3"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38a34576ab98c12e02bbea77f4a4336cd5d0a89143aeb0ef8dcdf91e702ce1dc"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c682c786e65fc95674f3efcc3733e587953c725a85d5ea4fd300bfb2339f2402"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cb6950b463fc38b2c13174e4b05b92a59633ef31876c85b0ef3d39a8936ac60"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb93db948862c6c99fa41a8860a782637dda59fd086e96225ba2205a53314a9c"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b7887460f38a8357131b7d52a3ef18495e94185863d26202bfd901b392ee46d"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee6ce11b1bad717a20cae3d67d13498fc86038fb639486ab13be6e4a802bc3e7"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4115543f3ee7208633377e49ce84ee2530219f356da81488740924e4e8c4edf0"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d842713a197b5f6c44ec07fc752b9dd189c1f889b37a319ca05a7c40ebda4e01"}
{"level":"info","ts":"2026-07-16T11:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f157d6267ead688eb22bd2f6d1759ef5f4c9d245538d966e9579602b2d4caa"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"debug","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"error","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"error","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"error","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"error","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"error","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:09:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:09:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7"}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"debug","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58970","PortSpecifier":{"PortValue":58970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58970","PortSpecifier":{"PortValue":58970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200220,"nanos":284550581},"http":{"id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/sub-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c24c3c5-c5b5-426e-a8b4-16df5f00646a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200220,"nanos":328012206},"http":{"id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/sub-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78fbc38c-1e62-48e8-82a3-21b42577ce42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58982","PortSpecifier":{"PortValue":58982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91e0f02b-0429-420c-8d00-e7bebf94516d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58982","PortSpecifier":{"PortValue":58982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200220,"nanos":371529701},"http":{"id":"91e0f02b-0429-420c-8d00-e7bebf94516d","method":"GET","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2bkRjNRNJeIqbvtx_4sGGqPnYRw3E4EGjguoIOxBRnHtktUUgLDjyZXx80ww"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2bkRjNRNJeIqbvtx_4sGGqPnYRw3E4EGjguoIOxBRnHtktUUgLDjyZXx80ww\"}"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"077b99d1-c18e-45d8-9c85-b950e29a57cf","keyName":"e2e-sub-iso-071b31","subscription":"e2e-a-only-ac4f42","tenant":"e2e-shared-a-046938","userId":"077b99d1-c18e-45d8-9c85-b950e29a57cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/sub-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ac4f42"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91e0f02b-0429-420c-8d00-e7bebf94516d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44c829b4-1239-48a6-b48a-d530aadc1d70","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200220,"nanos":413796208},"http":{"id":"44c829b4-1239-48a6-b48a-d530aadc1d70","method":"GET","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19cHrf1C4IAqVpEsa_lkwW7VPX7DJJVbNtQbkzaWWOsaD2WRi8pdgztYTUE7V"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19cHrf1C4IAqVpEsa_lkwW7VPX7DJJVbNtQbkzaWWOsaD2WRi8pdgztYTUE7V\"}"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eb9e22e7-ed75-4071-8308-3f43359b628d","keyName":"e2e-sub-iso-14f24b","subscription":"e2e-b-only-ac4f42","tenant":"e2e-shared-b-307109","userId":"eb9e22e7-ed75-4071-8308-3f43359b628d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/sub-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ac4f42"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c829b4-1239-48a6-b48a-d530aadc1d70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36152","PortSpecifier":{"PortValue":36152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36152","PortSpecifier":{"PortValue":36152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200237,"nanos":91718986},"http":{"id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/sub-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdbc7349-b830-4aa6-bb1a-9041556e93ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40842","PortSpecifier":{"PortValue":40842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40842","PortSpecifier":{"PortValue":40842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200237,"nanos":137193220},"http":{"id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/sub-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b1a640a-dfda-4dcb-aca9-13936aa1abbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36158","PortSpecifier":{"PortValue":36158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"328556aa-ba4e-4204-8f76-090e0e8981dd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36158","PortSpecifier":{"PortValue":36158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200237,"nanos":179802439},"http":{"id":"328556aa-ba4e-4204-8f76-090e0e8981dd","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I4xuQeMrLtm5JxCk_bTLl7vGjrCjQvfrDkE2H7RO9NH62KRUUXPw2DR981BQ"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I4xuQeMrLtm5JxCk_bTLl7vGjrCjQvfrDkE2H7RO9NH62KRUUXPw2DR981BQ\"}"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f503963-990f-4686-b601-0037392d4077","keyName":"e2e-sub-iso-35edfb","subscription":"e2e-shared-sub-4ca807","tenant":"e2e-shared-a-046938","userId":"9f503963-990f-4686-b601-0037392d4077","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/sub-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4ca807"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328556aa-ba4e-4204-8f76-090e0e8981dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126dda09-75b4-444f-bf04-fd67260f068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40852","PortSpecifier":{"PortValue":40852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"126dda09-75b4-444f-bf04-fd67260f068a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126dda09-75b4-444f-bf04-fd67260f068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40852","PortSpecifier":{"PortValue":40852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200237,"nanos":212493760},"http":{"id":"126dda09-75b4-444f-bf04-fd67260f068a","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pj2VdZulqFaYmgVr_W99gBGVFDsaOA6Cia5xsF8tLZijFTxOoeoEbMBdTxfL"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pj2VdZulqFaYmgVr_W99gBGVFDsaOA6Cia5xsF8tLZijFTxOoeoEbMBdTxfL\"}"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"688361db-4a6f-43c9-b855-0e1a17327bee","keyName":"e2e-sub-iso-8e58fa","subscription":"e2e-shared-sub-4ca807","tenant":"e2e-shared-b-307109","userId":"688361db-4a6f-43c9-b855-0e1a17327bee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"126dda09-75b4-444f-bf04-fd67260f068a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/sub-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4ca807"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"126dda09-75b4-444f-bf04-fd67260f068a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126dda09-75b4-444f-bf04-fd67260f068a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126dda09-75b4-444f-bf04-fd67260f068a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d8b66d2ce152ae1ecefbf576d7cdac6cd1a19ac97a6b509e60ae30425321e3a"}
{"level":"info","ts":"2026-07-16T11:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f371b1794a728fbd70dabf30f61c412e5682cb680b6c535297359e42b5b7c7f6"}
{"level":"info","ts":"2026-07-16T11:10:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4689e6fe3b86d29fe9c2bbbf9622900ed52728bad50a594c45948db1b7f09f71"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d682257695c56dab2fe3d13e293d5e4269b51c61c2e5fb0f363b66c6a60f0151"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ab4b80adf907ffa4dfc30ec906b3b4ad6f4a751f5d52380fb54bc11c87e379b"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d2975eb7ee89f28445fd57ea741b7360fb22ad78374634feaf3b9ffbed52f21"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ada5ce71b5c066fcd71342f4e49dad99cf520db545d92fde14f96d3237fdb144"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3bf0b254ca00e924350584cac3d757e307ec777ac0485d1a20475e031e676e2"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1585041b53eb1f71a7b67c518f8705312d262eedfd36f159fca4a288d169735a"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5967773ac4426118aa78fc3e4d29f44b84d93ca70354c5287a76c65220516f67"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1a811fcf4047de4e046939795cb7e564cbb2d9db2f39d82c47678a37029b6f9"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b199937a4156b5fcf5d5365b2d8b77d9f424ac7bcfa61a85589b6e736c944336"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5452e5544e2ee30dcc098a439c0876f830f4042341cbf67d80246974a2527d24"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f643ec6bc223828740b45ea808040997fb9df3e2415cfbfcf145b8f34acd52"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4ba26a436b540fdb18ddea071e697170dd95c743d08a281d010391dd08ef904"}
{"level":"info","ts":"2026-07-16T11:10:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0aa37d52ca06f16f88c6228d0d59a18b0cac609fb6bbf52938e0a892a051d93"}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:10:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:10:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"debug","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"debug","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"debug","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"error","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60772","PortSpecifier":{"PortValue":60772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60772","PortSpecifier":{"PortValue":60772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":810100596},"http":{"id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":860845582},"http":{"id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":904243715},"http":{"id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60792","PortSpecifier":{"PortValue":60792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60792","PortSpecifier":{"PortValue":60792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200321,"nanos":968636951},"http":{"id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f875706-2351-431f-a668-a9d2a8c08cfe","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200323,"nanos":14040237},"http":{"id":"0f875706-2351-431f-a668-a9d2a8c08cfe","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55456","PortSpecifier":{"PortValue":55456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55456","PortSpecifier":{"PortValue":55456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":833593919},"http":{"id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":884791727},"http":{"id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55464","PortSpecifier":{"PortValue":55464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55464","PortSpecifier":{"PortValue":55464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":925050836},"http":{"id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e51fae87-5426-49e1-9ed3-51c494242027","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200334,"nanos":967989633},"http":{"id":"e51fae87-5426-49e1-9ed3-51c494242027","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e51fae87-5426-49e1-9ed3-51c494242027","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e51fae87-5426-49e1-9ed3-51c494242027","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e51fae87-5426-49e1-9ed3-51c494242027","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200336,"nanos":11371760},"http":{"id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","method":"POST","path":"/ai-tenant-e2e-shared-b-307109/rate-test-model-307109/v1/completions","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200336,"nanos":47909655},"http":{"id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-307109/rate-test-model-307109/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u6uDjmbGIycXc8lq_9MYHkxVtyGgTsIJ0Oyo5OEUuZByQuXt3lgidAQ2ogc8"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u6uDjmbGIycXc8lq_9MYHkxVtyGgTsIJ0Oyo5OEUuZByQuXt3lgidAQ2ogc8\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7726542-9886-4ab2-af08-da98ffb7919f","keyName":"e2e-rate-b-29d84e","subscription":"e2e-rate-iso-b-29d84e","tenant":"e2e-shared-b-307109","userId":"a7726542-9886-4ab2-af08-da98ffb7919f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\",\"requestedSubscription\":\"e2e-rate-iso-b-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-307109","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29d84e","namespace":"ai-tenant-e2e-shared-b-307109","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7726542-9886-4ab2-af08-da98ffb7919f","keyName":"e2e-rate-b-29d84e","selected_subscription":"e2e-rate-iso-b-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-b-307109/e2e-rate-iso-b-29d84e@ai-tenant-e2e-shared-b-307109/rate-test-model-307109","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-307109","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29d84e","namespace":"ai-tenant-e2e-shared-b-307109","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}