--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-13T21:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f"}
{"level":"debug","ts":"2026-07-13T21:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961"}
{"level":"debug","ts":"2026-07-13T21:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961"}
{"level":"info","ts":"2026-07-13T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21bec0b758f6e191e731f0a53c32d8dba8134fd3fdca35a4075fa4e3a6055d63"}
{"level":"info","ts":"2026-07-13T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6745b9347e079384d631b440adf992bb49d944be071d092a61bcbd692c655e57"}
{"level":"info","ts":"2026-07-13T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cb2de7206cb2148b81fbf1e97b73367acd224efae3c66d1ff583a8efc3c49ba"}
{"level":"info","ts":"2026-07-13T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3dcad9ce378730d8ea825a4229ce1796a86a50f4241fbb48415bed3a212bf37"}
{"level":"info","ts":"2026-07-13T21:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d91fcaca911673b85698f71d9d34fbded6ad2b634333c3d44dec8d028765bd57"}
{"level":"info","ts":"2026-07-13T21:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83bc6a421bc6c744c022bb602292f576f271389947091089eee58b56f124d3a9"}
{"level":"info","ts":"2026-07-13T21:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a738f9e7ee4244d61dde7669f797ec4de47f81f202080f3eaa7bbc81ce2661f"}
{"level":"info","ts":"2026-07-13T21:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee1b95e8a61a3957b7af67efd46bcd4e32506c841d692df77deddf356d818961"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1"}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"}
{"level":"debug","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac"}
{"level":"info","ts":"2026-07-13T21:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2"}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7"}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2"}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"error","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"error","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"debug","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:39:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:39:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:39:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:39:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47826","PortSpecifier":{"PortValue":47826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47826","PortSpecifier":{"PortValue":47826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978775,"nanos":900232135},"http":{"id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85de1bab-2e6b-4595-86dd-dd0f4aa06420","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52968","PortSpecifier":{"PortValue":52968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e24811a-38d7-47d7-a282-4d508e282af1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52968","PortSpecifier":{"PortValue":52968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978775,"nanos":959564954},"http":{"id":"5e24811a-38d7-47d7-a282-4d508e282af1","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e24811a-38d7-47d7-a282-4d508e282af1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47836","PortSpecifier":{"PortValue":47836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","method":"GET","path":"/maas-api/v1/api-keys/872a4883-c9d6-4224-9fdb-4bd6ded57218","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47836","PortSpecifier":{"PortValue":47836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978776,"nanos":20649959},"http":{"id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","method":"GET","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/872a4883-c9d6-4224-9fdb-4bd6ded57218",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/872a4883-c9d6-4224-9fdb-4bd6ded57218",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9f005e-4ffc-47b5-bfdd-53a8f011aaab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52978","PortSpecifier":{"PortValue":52978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","method":"GET","path":"/maas-api/v1/api-keys/e5cf9a61-ac25-4d51-9010-8fb421dac24d","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52978","PortSpecifier":{"PortValue":52978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978776,"nanos":57643838},"http":{"id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","method":"GET","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5cf9a61-ac25-4d51-9010-8fb421dac24d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5cf9a61-ac25-4d51-9010-8fb421dac24d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f02f67-cd2e-4127-9d4f-6d6ab9e3f80f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47152","PortSpecifier":{"PortValue":47152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d60083a-da0e-4a84-8684-f24639f5aef1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47152","PortSpecifier":{"PortValue":47152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978795,"nanos":280762617},"http":{"id":"1d60083a-da0e-4a84-8684-f24639f5aef1","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d60083a-da0e-4a84-8684-f24639f5aef1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52152","PortSpecifier":{"PortValue":52152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52152","PortSpecifier":{"PortValue":52152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978795,"nanos":321285752},"http":{"id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2349f3a4-e3f7-439a-82f5-d97ea9dfbade","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47156","PortSpecifier":{"PortValue":47156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47156","PortSpecifier":{"PortValue":47156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978795,"nanos":360617910},"http":{"id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","method":"GET","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ikxZ9QrlhCYbjcQg_EwOwIWR71o6mBiUZNXdHWD6lFLx2vX1GJ3xGb0WTsXl"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ikxZ9QrlhCYbjcQg_EwOwIWR71o6mBiUZNXdHWD6lFLx2vX1GJ3xGb0WTsXl\"}"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f3cbb46-21df-413c-b461-022188372419","keyName":"e2e-auth-iso-a-d71834","subscription":"e2e-auth-iso-470390","tenant":"e2e-shared-a-0e15bb","userId":"1f3cbb46-21df-413c-b461-022188372419","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-470390"}
{"level":"info","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e71d62-6e35-4b5b-a2b7-1d6c036036ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60682","PortSpecifier":{"PortValue":60682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60682","PortSpecifier":{"PortValue":60682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978812,"nanos":449888378},"http":{"id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ef95004-8d8b-4032-a5f4-f416bd970f76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f763184-3c2e-4f1e-b97c-3ec648189285","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33158","PortSpecifier":{"PortValue":33158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978812,"nanos":504633334},"http":{"id":"3f763184-3c2e-4f1e-b97c-3ec648189285","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f763184-3c2e-4f1e-b97c-3ec648189285","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e89457-8883-466f-97a1-8e962485f33b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11e89457-8883-466f-97a1-8e962485f33b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e89457-8883-466f-97a1-8e962485f33b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978812,"nanos":543017233},"http":{"id":"11e89457-8883-466f-97a1-8e962485f33b","method":"GET","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11e89457-8883-466f-97a1-8e962485f33b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11dBv6F4PKZhMBx8H_U8YHXEXHL6u1wgxeY9621Ngtxv1Vn2bbpQtFvFEExhG"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11e89457-8883-466f-97a1-8e962485f33b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11dBv6F4PKZhMBx8H_U8YHXEXHL6u1wgxeY9621Ngtxv1Vn2bbpQtFvFEExhG\"}"}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11e89457-8883-466f-97a1-8e962485f33b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11e89457-8883-466f-97a1-8e962485f33b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e89457-8883-466f-97a1-8e962485f33b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"11e89457-8883-466f-97a1-8e962485f33b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e89457-8883-466f-97a1-8e962485f33b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T21:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e89457-8883-466f-97a1-8e962485f33b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f83451-0376-450f-8541-48a327b6c68e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01f83451-0376-450f-8541-48a327b6c68e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f83451-0376-450f-8541-48a327b6c68e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978829,"nanos":624316799},"http":{"id":"01f83451-0376-450f-8541-48a327b6c68e","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01f83451-0376-450f-8541-48a327b6c68e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01f83451-0376-450f-8541-48a327b6c68e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f83451-0376-450f-8541-48a327b6c68e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f83451-0376-450f-8541-48a327b6c68e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f83451-0376-450f-8541-48a327b6c68e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5531e83-422b-45a9-a64c-2e742cdcf777","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978829,"nanos":661133953},"http":{"id":"f5531e83-422b-45a9-a64c-2e742cdcf777","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5531e83-422b-45a9-a64c-2e742cdcf777","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b417e7f2-6711-4397-a290-49a7dbd25f94","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978829,"nanos":696634334},"http":{"id":"b417e7f2-6711-4397-a290-49a7dbd25f94","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b417e7f2-6711-4397-a290-49a7dbd25f94","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60160","PortSpecifier":{"PortValue":60160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60160","PortSpecifier":{"PortValue":60160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978829,"nanos":728340312},"http":{"id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c85e06-eb2a-4e45-a0e9-a0f539b03bdd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48722","PortSpecifier":{"PortValue":48722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48722","PortSpecifier":{"PortValue":48722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978854,"nanos":114127020},"http":{"id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d94274-0958-4c1b-9fa2-5ca09d8f5ff7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978854,"nanos":146221050},"http":{"id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ba74d07-ac52-4879-a9e3-6fb7094bf5aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f855c424-2d17-4d43-ab65-f58114b17988","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59882","PortSpecifier":{"PortValue":59882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f855c424-2d17-4d43-ab65-f58114b17988","method":"GET","path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f855c424-2d17-4d43-ab65-f58114b17988","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59882","PortSpecifier":{"PortValue":59882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978854,"nanos":183219229},"http":{"id":"f855c424-2d17-4d43-ab65-f58114b17988","method":"GET","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f855c424-2d17-4d43-ab65-f58114b17988","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f855c424-2d17-4d43-ab65-f58114b17988","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f855c424-2d17-4d43-ab65-f58114b17988","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f855c424-2d17-4d43-ab65-f58114b17988","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f855c424-2d17-4d43-ab65-f58114b17988","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","method":"GET","path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978854,"nanos":218084103},"http":{"id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","method":"GET","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57bed897-3d58-4321-8318-a1bc43215c98",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:40:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ed19f6-aea5-4909-bb13-2a6ccd5c0f02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57804","PortSpecifier":{"PortValue":57804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57804","PortSpecifier":{"PortValue":57804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978871,"nanos":279348153},"http":{"id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251044fe-bcea-4d22-a977-eaa93fbdc95b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978871,"nanos":315076448},"http":{"id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/auth-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a1ef991-ba96-4d11-948b-c8ce4ad649c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57816","PortSpecifier":{"PortValue":57816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57816","PortSpecifier":{"PortValue":57816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978871,"nanos":354170234},"http":{"id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-seAd39NdGF7d8cGP_OwfYOPatYbrUAZl7QFJV9CnLeeMsOg8SlMDbcKWiqrM"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-seAd39NdGF7d8cGP_OwfYOPatYbrUAZl7QFJV9CnLeeMsOg8SlMDbcKWiqrM\"}"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1627ac32-7602-4a7f-a910-ae8a801f80af","keyName":"e2e-auth-iso-a-da6cb5","subscription":"e2e-auth-iso-de2598","tenant":"e2e-shared-a-0e15bb","userId":"1627ac32-7602-4a7f-a910-ae8a801f80af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/auth-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-de2598"}
{"level":"info","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:41:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"077b6e4d-4c19-40f6-a293-e3da6f868ce2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0fe5dcba1e59b7147e7a3491b680fb685ad905656d6f814075ab9370fa90063"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d39684995e6b447f461f0e8407a679cabbd722c6d9b0aceee46b161efefa8e9"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a74a8dcf2e0bcf137b80e6c3d3b5c477468741e29089c8ea670d7e0585ca173"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f707ea100267ae6e6c1b571dc8f678c8be8d77cfde68e57e92382296518cac"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc9ea95816fc0693550d36b069244922dbb906dca7242a9c47fbff8913ec6745"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b53bb77d10d265ff18ecbd582d88284212d008bb227906204ec9f701efd12bf2"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a2adf188b78f57ce7590d863abad6ead7922bfa35f7ef0c150f1a0614909106"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d287c0865e8ec165e128868541f274fd321f9349f2e4667106cd125121ecfeb1"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1758c7e79b2fdeee71b68fd7147bbbe475c02a3c5aa4969428692475c614cad7"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c2ccd288b86aa68df2c0fc90ebdf6b9554eb81b7110f7cc4f2a1a2742dc057e"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a256460c6152095dd6f3aa80fa53585c172bd45b7c3860e6d46452d98287bec"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2788552c2c831f57173becc044f83f2b42f89f2ea525f1e9c222547da6803088"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e8e8b4dd18c42ad12dd6703751da56429ef8940a386a8b04fd65e315c82158"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b43c9c2e4016f5439a1c76a287c74c7190cb0a9a0618d76f9c492fdebfec0b2e"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16b6eb42d31519f30177e0b857b0301fac2d5655a2f078253b50cdee133c805a"}
{"level":"info","ts":"2026-07-13T21:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c132acf69e65cdff965a1a886b508a21be39a55a7424c3f6d222f9ccbaeba0"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383"}
{"level":"error","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"}
{"level":"info","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"error","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"error","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:41:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:41:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"debug","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"}
{"level":"debug","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"}
{"level":"info","ts":"2026-07-13T21:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45912","PortSpecifier":{"PortValue":45912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45912","PortSpecifier":{"PortValue":45912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978932,"nanos":220087728},"http":{"id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/sub-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30a2cae8-5b0a-47d2-8554-8d75120acb29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38400","PortSpecifier":{"PortValue":38400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38400","PortSpecifier":{"PortValue":38400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978932,"nanos":262571620},"http":{"id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/sub-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e01d393f-947f-4ca2-830c-2ce7faa2b419","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45928","PortSpecifier":{"PortValue":45928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45928","PortSpecifier":{"PortValue":45928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978932,"nanos":313786940},"http":{"id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","method":"GET","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-N85OdRBokOrjl2Qi_sl97YhjFm9LPwKUa912kuyaSmG8ogicadsmcXFpIbXb"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-N85OdRBokOrjl2Qi_sl97YhjFm9LPwKUa912kuyaSmG8ogicadsmcXFpIbXb\"}"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"afceee1c-207f-40d4-8404-99a8153ee6df","keyName":"e2e-sub-iso-9b5f73","subscription":"e2e-a-only-186951","tenant":"e2e-shared-a-0e15bb","userId":"afceee1c-207f-40d4-8404-99a8153ee6df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/sub-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-186951"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ac2e7c-68a0-4148-a28c-26e0690d27dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38402","PortSpecifier":{"PortValue":38402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eada0a00-d0f6-4d3e-9790-8547db406047","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38402","PortSpecifier":{"PortValue":38402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978932,"nanos":356964529},"http":{"id":"eada0a00-d0f6-4d3e-9790-8547db406047","method":"GET","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-v6T7K3RMbLIjOwR1_KY34ZgvkpXul2egGEFWOynfm6UzbuwXwlSlMxdI0DKI"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-v6T7K3RMbLIjOwR1_KY34ZgvkpXul2egGEFWOynfm6UzbuwXwlSlMxdI0DKI\"}"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e9f6edc-e59c-4fd9-8b8c-e5e3ff907957","keyName":"e2e-sub-iso-755e52","subscription":"e2e-b-only-186951","tenant":"e2e-shared-b-18e186","userId":"4e9f6edc-e59c-4fd9-8b8c-e5e3ff907957","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/sub-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-186951"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eada0a00-d0f6-4d3e-9790-8547db406047","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49908","PortSpecifier":{"PortValue":49908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e38e4539-61a0-46d9-a41c-f611c6b44986","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49908","PortSpecifier":{"PortValue":49908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978942,"nanos":480550112},"http":{"id":"e38e4539-61a0-46d9-a41c-f611c6b44986","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/sub-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e38e4539-61a0-46d9-a41c-f611c6b44986","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52798","PortSpecifier":{"PortValue":52798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20560daa-ef23-4880-b20f-950f28c2a7e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52798","PortSpecifier":{"PortValue":52798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978942,"nanos":523167495},"http":{"id":"20560daa-ef23-4880-b20f-950f28c2a7e4","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/sub-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20560daa-ef23-4880-b20f-950f28c2a7e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49922","PortSpecifier":{"PortValue":49922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49922","PortSpecifier":{"PortValue":49922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978942,"nanos":561841630},"http":{"id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9VKVRVRwzrKd1hOb_T1DCIb9IRKS9C4IfzybXIrtWH7MzFURJsXEkC1KexHE"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9VKVRVRwzrKd1hOb_T1DCIb9IRKS9C4IfzybXIrtWH7MzFURJsXEkC1KexHE\"}"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"720280a9-7380-4a92-85dd-15c7bc4c4d72","keyName":"e2e-sub-iso-b68b1d","subscription":"e2e-shared-sub-2ccd41","tenant":"e2e-shared-a-0e15bb","userId":"720280a9-7380-4a92-85dd-15c7bc4c4d72","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/sub-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2ccd41"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37b7e20-a7e3-488a-bf98-d1bccdf6196f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52808","PortSpecifier":{"PortValue":52808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52808","PortSpecifier":{"PortValue":52808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978942,"nanos":597984486},"http":{"id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1c3BXlbfNFxPXPRX5_wfr1mKo1sAhBZYDbnUxQ81ltuZBpc54mP4harD9bQJq"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1c3BXlbfNFxPXPRX5_wfr1mKo1sAhBZYDbnUxQ81ltuZBpc54mP4harD9bQJq\"}"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5c341672-ea8a-459f-9b57-bfafdace9b37","keyName":"e2e-sub-iso-3ee21e","subscription":"e2e-shared-sub-2ccd41","tenant":"e2e-shared-b-18e186","userId":"5c341672-ea8a-459f-9b57-bfafdace9b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/sub-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2ccd41"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68d0fa49-0b11-4aaa-a581-e980ae8d1ae3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c8adc3c831c47ad67d290621ae3633679433bc77103d0f9502ed576a9c16b8"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37735f95313202762e34c99453c618688292b4ef8f466294039ea910063f109f"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66985c31204aa07f55e1c209bf457866f7ea148368df5aa48cf62bde5df08ed8"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa53c2f58c64edd48cce1367fdb24ede4e67cfc3f2c1dd908484154bf1a5e383"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52fcac9eae2b97d1ba7147f5bfe41292c31945dddd163446564d438827d0228f"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c8819477071bd7a21d277a33f3670f18bfc5d54875186c2cd044d0ef7595f83"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1faa06d922a90d5e9f7c1665980997355c3c2f0f24069fa5552d36f8126fc7c2"}
{"level":"info","ts":"2026-07-13T21:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72c0795507398308d29dd7aa27ae367eb3b0d8f1d0ce3ae01b496c8655a5a7ec"}
{"level":"info","ts":"2026-07-13T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3e354c745020a21ca3427b9d7a1f75550d2419df1c3276ece7fd5bd4e2b3903"}
{"level":"info","ts":"2026-07-13T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0361155b65deea39177f5d2a2ce39ac4bb6b230eb9b4b0d35d1d519b64bb63b"}
{"level":"info","ts":"2026-07-13T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c1cedffa5924e8da9477b12b643f23b624bfff71eabbc29ab74a4d24a06b63b"}
{"level":"info","ts":"2026-07-13T21:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59721a10b2fdf195ad69ef36d4865990d776036bef82856186e50c87cfe22fed"}
{"level":"info","ts":"2026-07-13T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95309a1226531f52ca80207f96892be328237071be503a61efb1ef84f11b1bc5"}
{"level":"info","ts":"2026-07-13T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa66549a3f8e1edf82167436eb2aadee6ab754c164c0c8db2389beaaf00a9b6a"}
{"level":"info","ts":"2026-07-13T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/695ba9447979be48f292e3a02c35b6b3e7440f3ba53737a852e6e17830cbe522"}
{"level":"info","ts":"2026-07-13T21:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5491985658ff1f8ca2ff8b0b911d72c51833efe8a96d6449b2869a4b7b6ce08e"}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"error","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"error","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"info","ts":"2026-07-13T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"error","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"}
{"level":"info","ts":"2026-07-13T21:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33704","PortSpecifier":{"PortValue":33704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9fbc694-455a-4a7f-92ed-3e0724101067","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33704","PortSpecifier":{"PortValue":33704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978998,"nanos":578211450},"http":{"id":"e9fbc694-455a-4a7f-92ed-3e0724101067","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9fbc694-455a-4a7f-92ed-3e0724101067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42290","PortSpecifier":{"PortValue":42290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04388aae-9470-44fa-8f70-a31a2435c8ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42290","PortSpecifier":{"PortValue":42290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978998,"nanos":617615822},"http":{"id":"04388aae-9470-44fa-8f70-a31a2435c8ef","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04388aae-9470-44fa-8f70-a31a2435c8ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33706","PortSpecifier":{"PortValue":33706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33706","PortSpecifier":{"PortValue":33706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978998,"nanos":660143535},"http":{"id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n\"}"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","subscription":"e2e-rate-iso-a-c3d59c","tenant":"e2e-shared-a-0e15bb","userId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-c3d59c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3d59c"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","selected_subscription":"e2e-rate-iso-a-c3d59c","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-c3d59c@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6fdde3e-c8b7-4f0e-a8d9-8dbd04a8363b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33708","PortSpecifier":{"PortValue":33708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1693cdc-750d-44c9-954c-15d9463b4817","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33708","PortSpecifier":{"PortValue":33708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783978999,"nanos":710729642},"http":{"id":"a1693cdc-750d-44c9-954c-15d9463b4817","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n\"}"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","subscription":"e2e-rate-iso-a-c3d59c","tenant":"e2e-shared-a-0e15bb","userId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-c3d59c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3d59c"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","selected_subscription":"e2e-rate-iso-a-c3d59c","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-c3d59c@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1693cdc-750d-44c9-954c-15d9463b4817","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33722","PortSpecifier":{"PortValue":33722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33722","PortSpecifier":{"PortValue":33722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979000,"nanos":750313459},"http":{"id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C9rSsCfrpWO9OncW_ZPcfvhxOjGe1BZCsX3WBm1Dusws7ETfDGbQK2r5Sf4n\"}"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","subscription":"e2e-rate-iso-a-c3d59c","tenant":"e2e-shared-a-0e15bb","userId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-c3d59c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3d59c"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e18f82ef-5e84-4690-82ac-0a9dd5fa418b","keyName":"e2e-rate-a-c3d59c","selected_subscription":"e2e-rate-iso-a-c3d59c","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-c3d59c@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3d59c","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f092bda-0c96-4b2f-aeb8-7fdf2d685e91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41646","PortSpecifier":{"PortValue":41646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41646","PortSpecifier":{"PortValue":41646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979017,"nanos":863975047},"http":{"id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae9d010-e8b0-4688-af4d-16e5ed5201e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fad9850d-076b-4d99-8722-8ceccc275c58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979017,"nanos":901171837},"http":{"id":"fad9850d-076b-4d99-8722-8ceccc275c58","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"]}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/39e769d51822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=38ce3c1f-5da1-4778-91c7-6867df90f858"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0737beff-f36e-484c-b2b5-bf9a2dadad59","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fad9850d-076b-4d99-8722-8ceccc275c58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41652","PortSpecifier":{"PortValue":41652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f831b1d-23c1-4830-a752-9e9b513e8334","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41652","PortSpecifier":{"PortValue":41652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979017,"nanos":936860001},"http":{"id":"1f831b1d-23c1-4830-a752-9e9b513e8334","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh\"}"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","subscription":"e2e-rate-iso-a-3cc6ee","tenant":"e2e-shared-a-0e15bb","userId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-3cc6ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cc6ee"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","selected_subscription":"e2e-rate-iso-a-3cc6ee","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-3cc6ee@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f831b1d-23c1-4830-a752-9e9b513e8334","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979018,"nanos":976677792},"http":{"id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh\"}"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","subscription":"e2e-rate-iso-a-3cc6ee","tenant":"e2e-shared-a-0e15bb","userId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-3cc6ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cc6ee"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","selected_subscription":"e2e-rate-iso-a-3cc6ee","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-3cc6ee@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d55d92c2-35c0-49f7-b23e-0f4a6bf8181d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41666","PortSpecifier":{"PortValue":41666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ab1afac-bee7-406a-94bf-aca3945bf504","method":"POST","path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions","host":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41666","PortSpecifier":{"PortValue":41666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979020,"nanos":37072880},"http":{"id":"7ab1afac-bee7-406a-94bf-aca3945bf504","method":"POST","headers":{":authority":"e2e-shared-a-0e15bb.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G7XtSm78i641aAAS_HoqrSX283OrTVemZUY1q2B5ysCeAeNKUIv8yB9uzpjh\"}"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","subscription":"e2e-rate-iso-a-3cc6ee","tenant":"e2e-shared-a-0e15bb","userId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\",\"requestedSubscription\":\"e2e-rate-iso-a-3cc6ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e15bb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cc6ee"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d18680b-11cf-4605-b82f-cec41dbb3ff7","keyName":"e2e-rate-a-3cc6ee","selected_subscription":"e2e-rate-iso-a-3cc6ee","selected_subscription_key":"ai-tenant-e2e-shared-a-0e15bb/e2e-rate-iso-a-3cc6ee@ai-tenant-e2e-shared-a-0e15bb/rate-test-model-0e15bb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e15bb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cc6ee","namespace":"ai-tenant-e2e-shared-a-0e15bb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab1afac-bee7-406a-94bf-aca3945bf504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50148","PortSpecifier":{"PortValue":50148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cb2cdaa-a779-45e3-a569-16042348ed36","method":"POST","path":"/ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186/v1/completions","host":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50148","PortSpecifier":{"PortValue":50148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979020,"nanos":76947027},"http":{"id":"7cb2cdaa-a779-45e3-a569-16042348ed36","method":"POST","headers":{":authority":"e2e-shared-b-18e186.apps.2fbb8ee5-1959-4b73-9ab8-39e769d51822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-54ocRf4IlNMhPzvJ_iG0ykXLHECNuHtAOCRoUm9dr2OKik6Su6ZWSVRl0suO"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-54ocRf4IlNMhPzvJ_iG0ykXLHECNuHtAOCRoUm9dr2OKik6Su6ZWSVRl0suO\"}"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1b22a07-6eaa-4cc7-b869-7870642c4608","keyName":"e2e-rate-b-3cc6ee","subscription":"e2e-rate-iso-b-3cc6ee","tenant":"e2e-shared-b-18e186","userId":"f1b22a07-6eaa-4cc7-b869-7870642c4608","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186\",\"requestedSubscription\":\"e2e-rate-iso-b-3cc6ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-18e186.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-18e186","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cc6ee","namespace":"ai-tenant-e2e-shared-b-18e186","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3cc6ee"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1b22a07-6eaa-4cc7-b869-7870642c4608","keyName":"e2e-rate-b-3cc6ee","selected_subscription":"e2e-rate-iso-b-3cc6ee","selected_subscription_key":"ai-tenant-e2e-shared-b-18e186/e2e-rate-iso-b-3cc6ee@ai-tenant-e2e-shared-b-18e186/rate-test-model-18e186","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-18e186","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cc6ee","namespace":"ai-tenant-e2e-shared-b-18e186","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb2cdaa-a779-45e3-a569-16042348ed36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3aad873412fd19af2aa937402034671c46a282360fad2becac2e449a628026"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f98bf0155e32f95e8077e08c7bd46b3c6e56df5b42292d8d58fbc33b6bd80505"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebbeb15a424b0faa4a42fdb430c68e0061107ab8e538a8c5ed748bbba17ce0d0"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2042c1dfb2706a12ba8177605a20bcc0163928eedd9c1a56685096a6efb0723f"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3070991b6b3a0b3cb55c273def675a335a88e598b026510316667caeb5631070"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b835934f4468c4b85238bedb90ebcdbd4d3973d1a3db24ef4eed3ad70622c9"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fed317c925f02212183df6e1b6dd70a7378df9589c506235cb95c09ae726a0b"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4381dd90cdfe6db53a8eae7f8299a9add25cef4d713129e3dd8e6f3c2977d8a"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e047044a27043d0a291f8b8b84498a73e99e3b7495b22525043466ba458950c"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/687913b9ead0ec06c042e53e8e071d75ebb80ab8146509c2bcf0806a778c9749"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae777b4a3f13a587204a004d6c4bdc23c73b74573865abd0e6ef1141e151b33"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5a13a9c4982698466d41c5cac950da7a3fbddf7c028b9c7e630f1400ccc9da"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57f8a714b85103aab0e98972105e86d84bac023ab6102dc1f1e01676aa2f5d2d"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/050aecbb11eb21cef57bcc4a127239ece11e72b1b6c71b2502396ac2e491bf44"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28d7fb1b7c9dfdfc4e985a36cd127ac0be73e74c18eeb02e56aab39ede0a347d"}
{"level":"info","ts":"2026-07-13T21:43:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5608fb33de013aef4728a1c81189ffb391ad6acdcc3e41175864485ff945564"}
{"level":"info","ts":"2026-07-13T21:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb5142790387adc95215d7988b54c795d38038138c5123ef711127e70f6c96d"}
{"level":"info","ts":"2026-07-13T21:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aec2f4bf27f88b030b2ee8323c734ae839b50b372f7385ad39c7a05a7f78782"}
{"level":"info","ts":"2026-07-13T21:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e6e46dfcdf5849522a8418590efe3f33c2659398ae1a3734ca7d301e5a3e223"}
{"level":"info","ts":"2026-07-13T21:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ca408ceca9846701164edc6676120a223594024b0f9a9e232b71ee0b43fdfa"}
{"level":"info","ts":"2026-07-13T21:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1979438c7638211791db3553e89201bb35e127547344e48249837779f8b8abf"}
{"level":"info","ts":"2026-07-13T21:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a41abede38f8e8f59326534c60a1be78fd6b03bf0932b45e2b216097b0aed56"}
{"level":"info","ts":"2026-07-13T21:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/888e1015b2337237696824350d1951b80ba17a7439f1d3b315c9c20db003e38b"}
{"level":"info","ts":"2026-07-13T21:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db779831a706d9d9addcd7644d37e01175ffe1505716d23308d53e01829e2a8d"}