--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T20:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beac9b7f0d676c50bc86387fcb754b99dad8007aff3228008062b977c55cca92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef3e52372a2f898f712c93b543edc5f16a6d6431d895200defecec0b5a42e16"}
{"level":"info","ts":"2026-07-14T20:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94cbbd975c1b2182a7469415ab63ab903037227ee0078622a6daf70a0a729a31"}
{"level":"info","ts":"2026-07-14T20:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beac9b7f0d676c50bc86387fcb754b99dad8007aff3228008062b977c55cca92"}
{"level":"info","ts":"2026-07-14T20:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ca4e292cc0fcfd467d05ba82f18d6fd3f9af239812a20f8958205ed211ab2f7"}
{"level":"info","ts":"2026-07-14T20:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6d8269f08a251ec5da347e1e22aca5e0505999bb1e1c381ebcecf3b8988aa37"}
{"level":"info","ts":"2026-07-14T20:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc68e0cf3ec6b91072e642c5fd7c30bc649c4060830ef68e5787fb25e165fc6"}
{"level":"info","ts":"2026-07-14T20:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d5d99ab1b5de1ef364a333e69bc602f493167a0ea9788bb1b824f1e9cf381aa"}
{"level":"info","ts":"2026-07-14T20:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cef3e52372a2f898f712c93b543edc5f16a6d6431d895200defecec0b5a42e16"}
{"level":"info","ts":"2026-07-14T20:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94cbbd975c1b2182a7469415ab63ab903037227ee0078622a6daf70a0a729a31"}
{"level":"info","ts":"2026-07-14T20:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beac9b7f0d676c50bc86387fcb754b99dad8007aff3228008062b977c55cca92"}
{"level":"info","ts":"2026-07-14T20:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/996b60d89fad09633785c93bdc8b9780190aafa03e620b933b9df98a49086fec"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"error","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"error","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"debug","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"error","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0"}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"}
{"level":"error","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54092","PortSpecifier":{"PortValue":54092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54092","PortSpecifier":{"PortValue":54092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":92923953},"http":{"id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d7b69a-28ac-4924-95f7-b83b3f79387f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34922","PortSpecifier":{"PortValue":34922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34922","PortSpecifier":{"PortValue":34922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":149928548},"http":{"id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee3ebda7-afda-4d5b-b808-f404e1efca5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54102","PortSpecifier":{"PortValue":54102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","method":"GET","path":"/maas-api/v1/api-keys/1dd0527b-d812-4956-a182-e3952f7efdc5","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54102","PortSpecifier":{"PortValue":54102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":208845140},"http":{"id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","method":"GET","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1dd0527b-d812-4956-a182-e3952f7efdc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1dd0527b-d812-4956-a182-e3952f7efdc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2ca2796-484c-4c5d-9cdb-c16e44f219c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8e9b71-c979-454c-af8c-db83f315efce","method":"GET","path":"/maas-api/v1/api-keys/fc8ed4b2-a5fd-475f-b830-f348024eb8f4","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":242022845},"http":{"id":"ef8e9b71-c979-454c-af8c-db83f315efce","method":"GET","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fc8ed4b2-a5fd-475f-b830-f348024eb8f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fc8ed4b2-a5fd-475f-b830-f348024eb8f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8e9b71-c979-454c-af8c-db83f315efce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47962","PortSpecifier":{"PortValue":47962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47962","PortSpecifier":{"PortValue":47962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060872,"nanos":617580324},"http":{"id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63eb9844-8cb3-4a36-ac11-38ced25ed9c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4728f281-34e8-4496-8997-628347ea423a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44630","PortSpecifier":{"PortValue":44630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4728f281-34e8-4496-8997-628347ea423a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4728f281-34e8-4496-8997-628347ea423a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44630","PortSpecifier":{"PortValue":44630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060872,"nanos":652800557},"http":{"id":"4728f281-34e8-4496-8997-628347ea423a","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4728f281-34e8-4496-8997-628347ea423a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4728f281-34e8-4496-8997-628347ea423a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4728f281-34e8-4496-8997-628347ea423a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4728f281-34e8-4496-8997-628347ea423a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4728f281-34e8-4496-8997-628347ea423a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060872,"nanos":691229151},"http":{"id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","method":"GET","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9wtM5ICJatckczNk_tgS8XqsS06UOFqHFCJK55txIIGhdk87EFQ6kdQJrYOb"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9wtM5ICJatckczNk_tgS8XqsS06UOFqHFCJK55txIIGhdk87EFQ6kdQJrYOb\"}"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1dfc1776-98bb-4d7d-8e86-c70f290e45bf","keyName":"e2e-auth-iso-a-5cbcff","subscription":"e2e-auth-iso-76a567","tenant":"e2e-shared-a-fad346","userId":"1dfc1776-98bb-4d7d-8e86-c70f290e45bf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-76a567"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dfe9167-ddd2-42d2-818e-5500506fa5fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060887,"nanos":783740164},"http":{"id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22a327a6-b9b3-4590-bdde-5cc2f805b08f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a133f115-0d92-4c57-b228-5f30b57ce515","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060887,"nanos":823287637},"http":{"id":"a133f115-0d92-4c57-b228-5f30b57ce515","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a133f115-0d92-4c57-b228-5f30b57ce515","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36362","PortSpecifier":{"PortValue":36362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce990f4f-9f69-434d-a625-01cfc651db07","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36362","PortSpecifier":{"PortValue":36362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060887,"nanos":857904089},"http":{"id":"ce990f4f-9f69-434d-a625-01cfc651db07","method":"GET","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQsgvDViiIfMGdM3_iaIsgOmZgrdh8seCuaJGJAySxIqnMCJPX6NDQfJWJgB"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQsgvDViiIfMGdM3_iaIsgOmZgrdh8seCuaJGJAySxIqnMCJPX6NDQfJWJgB\"}"}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T20:28:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce990f4f-9f69-434d-a625-01cfc651db07","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac710786-2665-4570-9559-bfd4916e2793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38062","PortSpecifier":{"PortValue":38062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac710786-2665-4570-9559-bfd4916e2793","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac710786-2665-4570-9559-bfd4916e2793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38062","PortSpecifier":{"PortValue":38062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060907,"nanos":111988221},"http":{"id":"ac710786-2665-4570-9559-bfd4916e2793","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac710786-2665-4570-9559-bfd4916e2793","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac710786-2665-4570-9559-bfd4916e2793","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac710786-2665-4570-9559-bfd4916e2793","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac710786-2665-4570-9559-bfd4916e2793","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac710786-2665-4570-9559-bfd4916e2793","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60596","PortSpecifier":{"PortValue":60596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60596","PortSpecifier":{"PortValue":60596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060907,"nanos":147135766},"http":{"id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11c1da86-967e-48ed-82e5-eb12d9a1747b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38068","PortSpecifier":{"PortValue":38068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38068","PortSpecifier":{"PortValue":38068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060907,"nanos":180326801},"http":{"id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16277006-a2e0-4d31-b9a7-c765ebdb80c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60604","PortSpecifier":{"PortValue":60604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60604","PortSpecifier":{"PortValue":60604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060907,"nanos":224350901},"http":{"id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f89e74-e8b3-4f18-bafe-c33fb52dba39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060924,"nanos":379485699},"http":{"id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb8442e9-e4f2-4e10-b5a0-5d049e6e216f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45730","PortSpecifier":{"PortValue":45730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45730","PortSpecifier":{"PortValue":45730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060924,"nanos":414679954},"http":{"id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1781bb6a-ed60-4f9e-a387-92b0968b2861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45732","PortSpecifier":{"PortValue":45732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","method":"GET","path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45732","PortSpecifier":{"PortValue":45732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060924,"nanos":452000423},"http":{"id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","method":"GET","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd870b4-ca92-4943-b50a-979aa6f3aa5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","method":"GET","path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060924,"nanos":482339294},"http":{"id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","method":"GET","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5cc8de1d-0900-46f9-9e86-fc56905e4c1f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36aa08df-f417-443e-9d8b-61bbfcff32b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40176","PortSpecifier":{"PortValue":40176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e626912a-92e5-47d7-a08d-f684b6d525c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40176","PortSpecifier":{"PortValue":40176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060943,"nanos":788518223},"http":{"id":"e626912a-92e5-47d7-a08d-f684b6d525c8","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e626912a-92e5-47d7-a08d-f684b6d525c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"475706c4-1dbb-41ee-a805-643b664f7d64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060943,"nanos":824962360},"http":{"id":"475706c4-1dbb-41ee-a805-643b664f7d64","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/auth-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"475706c4-1dbb-41ee-a805-643b664f7d64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40188","PortSpecifier":{"PortValue":40188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40188","PortSpecifier":{"PortValue":40188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060943,"nanos":858383959},"http":{"id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dqVWtYpH1QfrpxCE_tTKPtncrfacBqrjDMO1Fi9fwhjeN6L3RnbhlJicxG0A"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dqVWtYpH1QfrpxCE_tTKPtncrfacBqrjDMO1Fi9fwhjeN6L3RnbhlJicxG0A\"}"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87011504-f503-488a-8df7-09f04fc9a32a","keyName":"e2e-auth-iso-a-c7344e","subscription":"e2e-auth-iso-2b31f4","tenant":"e2e-shared-a-fad346","userId":"87011504-f503-488a-8df7-09f04fc9a32a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/auth-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2b31f4"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:29:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14dc463-f0e7-4ae7-8648-9040a735dfd9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4c8582bb1ddb9cb88a52a14d5860a3a0ffa3f760656ffa874b7edf27919dd62"}
{"level":"info","ts":"2026-07-14T20:29:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad6c3ec67af5fca1b40b34530c79abeb8634812b8427d11c0775b858a872f883"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a989c9fe3c8a25e01acb6cdc592da8093bf6220188d7e43335b9376156c33c33"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81021f28a48eb45cfdf895d26efd55fdd5a9c100bbef659e77e4007dbf7b515c"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3011267fb82b19d458ccf06989ce9cea809e9da8b5af2100c1b413979bee5b7c"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccb152da089f9f5bcb1ef779cb7d380ac636b48e8b92bcda6f818db37e296b5"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bcae0afea27c593d9ad305110613ffa7704f5a448b599bc5df07212734fc79b"}
{"level":"info","ts":"2026-07-14T20:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b5ffd902f2fc3a1d8cc9d3c62a69fc8275987ab3356072d605c040f1e13fbb"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"error","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f9a56950fbd4c68bc5cf32ea457dce0627803e1817552b50f0bd87deae70d93"}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28b9cb3132286f016d881c495aac4290f39917754724bb7bd76819df210b4dc0"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b828757c6e7b29257dc9f27c2b0fd1da53b1cc40e491ad257093502aacbb267c"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/688cb677bd6432cb736a75f9c78c7a9dfc8f7953f62f94ecffb0d566c1d6e8b9"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd674a31a84a380fecaa2f145061544a0efe109f21e65019c004ae776cab1be8"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9997478ea1430320e0f77f2e22682287d95208778b2af12076b8a97d1780eb41"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/825693e0a651e1c8136a4017ded83fd0a4296b4c2bc4bdde05a33059f1af0ab3"}
{"level":"info","ts":"2026-07-14T20:29:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4f38380f93a053f0b8024343b2e9db6886d5029fb8260a6591400ab5ab090de"}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"error","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:29:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:29:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"debug","ts":"2026-07-14T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"error","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"info","ts":"2026-07-14T20:30:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49752","PortSpecifier":{"PortValue":49752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49752","PortSpecifier":{"PortValue":49752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061006,"nanos":712216632},"http":{"id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/sub-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b76bba8-1de1-4f94-a0f1-5902441d1b54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45344","PortSpecifier":{"PortValue":45344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45344","PortSpecifier":{"PortValue":45344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061006,"nanos":750753970},"http":{"id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/sub-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73251a3e-e9cd-43b3-ae82-b50a1432dee0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061006,"nanos":788692868},"http":{"id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","method":"GET","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JXrLimUZY4AoQdnm_Pesr2q0ftzkzzRwU0QXNJO2fCHCCWjHIqvxGMQ9RiJl"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JXrLimUZY4AoQdnm_Pesr2q0ftzkzzRwU0QXNJO2fCHCCWjHIqvxGMQ9RiJl\"}"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"895e3562-b811-4c76-a5ae-5716198ad884","keyName":"e2e-sub-iso-3cccfa","subscription":"e2e-a-only-d15aae","tenant":"e2e-shared-a-fad346","userId":"895e3562-b811-4c76-a5ae-5716198ad884","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/sub-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d15aae"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f69fda2c-c531-47e4-b5dc-1bd9f23ddf57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45352","PortSpecifier":{"PortValue":45352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45352","PortSpecifier":{"PortValue":45352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061006,"nanos":829377994},"http":{"id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","method":"GET","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-n6UWwVTOWhSc5jLl_GFmNZnxg44Zc4WiW83BHxIipkbrK1ThFAcm1fOLvymz"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-n6UWwVTOWhSc5jLl_GFmNZnxg44Zc4WiW83BHxIipkbrK1ThFAcm1fOLvymz\"}"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4aa58917-526e-4fe4-91fb-dd10d26b8baf","keyName":"e2e-sub-iso-d94a00","subscription":"e2e-b-only-d15aae","tenant":"e2e-shared-b-a99cbd","userId":"4aa58917-526e-4fe4-91fb-dd10d26b8baf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/sub-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d15aae"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b54b2e7-3264-4b26-82cd-8ed65ef64684","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33306","PortSpecifier":{"PortValue":33306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33306","PortSpecifier":{"PortValue":33306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061025,"nanos":397380824},"http":{"id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/sub-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc6278b5-b0e6-4a58-9348-7e84c1e935ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59238","PortSpecifier":{"PortValue":59238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061025,"nanos":436344121},"http":{"id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/sub-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e9f2a2e-54fd-4d01-9ac3-a322215ca99b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061025,"nanos":471837237},"http":{"id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pULWCMo96JZ1ucHD_EBYe8g4kZL7pD8Bqa8g4Lyz0yxzFtVkhP83QodgNg72"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pULWCMo96JZ1ucHD_EBYe8g4kZL7pD8Bqa8g4Lyz0yxzFtVkhP83QodgNg72\"}"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6266b5ad-4e79-4f3b-a3e3-ac3bba9af44f","keyName":"e2e-sub-iso-a539c2","subscription":"e2e-shared-sub-a66b12","tenant":"e2e-shared-a-fad346","userId":"6266b5ad-4e79-4f3b-a3e3-ac3bba9af44f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/sub-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a66b12"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b9f5886-f2ad-44a0-9f72-91218b16ee10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59240","PortSpecifier":{"PortValue":59240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59240","PortSpecifier":{"PortValue":59240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061025,"nanos":502949377},"http":{"id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lkx1dIPbbPLyEdYO_FYnpcpeKrVVVCECDYFBxYvZ67Wa1p3feOmmeitnJIq0"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Lkx1dIPbbPLyEdYO_FYnpcpeKrVVVCECDYFBxYvZ67Wa1p3feOmmeitnJIq0\"}"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5524f2b2-3497-471b-b17c-baf2541f0c5f","keyName":"e2e-sub-iso-7e570a","subscription":"e2e-shared-sub-a66b12","tenant":"e2e-shared-b-a99cbd","userId":"5524f2b2-3497-471b-b17c-baf2541f0c5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/sub-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a66b12"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf4162bd-8aba-47b8-a5bc-a2579b5c8870","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f69f8bf37148e9af760b8f01d13522f564d7ff91d7991e77aa21fc8a8a7827c5"}
{"level":"info","ts":"2026-07-14T20:30:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30af8db13a7e4eeba51555e8690de185290988f8b6b5f5d96b32fa9ca4211cf"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f2189fba25b2fe23d87c5144d6b942b6528f77fb097b73cf3f5b38c7f44c35"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3270cf8698ebdffc706f2dd4eaf3e60cda2230c9deed554e9ad00460dcf8d74e"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e841c967222f32f52f76b3d7dedcd11020fb2f2f3a003b3d5f825a3c1184f74"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b478efa102e828a41517c89aa8cdc2cd6f54ca3fe518ba4d99490308f22dfb"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09c9338c757a407aa76b55ddfc442360accd81269f564dbf0e503f3aca19241c"}
{"level":"info","ts":"2026-07-14T20:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1dbc8e7d2930de858ed20d0762a2d4d134b146f08f9dee4f9d46890c5268d19"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"info","ts":"2026-07-14T20:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44e90e43058d3039f97fe6bdf2648e57292eedd9fd132a5732d05b8af33f6a05"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59fc0d9d242ebc7dc45583663afe09382b92880e19fecab7697517d736341657"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74d246e788f22b9080e6b8c9318dde54a71c34390037dde770d70fd23f24582e"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/197203b6a2fcfbc24ed5a8492ab3cdfccc08aefa553ef65bff76a568e7f4b250"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c582075cf6d2d1be1c3eae323031c866b8799887656322bace1f29437baca7"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89bdada1f861521dad61c135312509644bb392184423b22329d1cf0db3c23500"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04d02fbdca1b7f5ebbfbfd25c61659c5ae18306d06a5a4319451323eaa78ca29"}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89cff3b7e308698cf649442a66f0e4ce2e11fc311c9276b77b46f6c51832417c"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"error","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"error","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":88832255},"http":{"id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":133872992},"http":{"id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46418","PortSpecifier":{"PortValue":46418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46418","PortSpecifier":{"PortValue":46418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":176564512},"http":{"id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46430","PortSpecifier":{"PortValue":46430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46430","PortSpecifier":{"PortValue":46430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061115,"nanos":238094566},"http":{"id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38caded2-23c0-464c-987a-23279d7e8009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46446","PortSpecifier":{"PortValue":46446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38caded2-23c0-464c-987a-23279d7e8009","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38caded2-23c0-464c-987a-23279d7e8009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46446","PortSpecifier":{"PortValue":46446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061116,"nanos":277926576},"http":{"id":"38caded2-23c0-464c-987a-23279d7e8009","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38caded2-23c0-464c-987a-23279d7e8009","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38caded2-23c0-464c-987a-23279d7e8009","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38caded2-23c0-464c-987a-23279d7e8009","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75b85c93-bd01-457d-bc19-46ce2746a13b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":481326321},"http":{"id":"75b85c93-bd01-457d-bc19-46ce2746a13b","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49798","PortSpecifier":{"PortValue":49798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49798","PortSpecifier":{"PortValue":49798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":522863649},"http":{"id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdadf19a-9328-47e2-a7e8-a9693be59853","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":557424712},"http":{"id":"fdadf19a-9328-47e2-a7e8-a9693be59853","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061130,"nanos":600985493},"http":{"id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061131,"nanos":638874457},"http":{"id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","method":"POST","path":"/ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd/v1/completions","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061131,"nanos":677630069},"http":{"id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQaLFoyHklGyx2D7_reOe9R34SJWjoWerT5isR3dET1pmke586g4KVBEKAq0"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQaLFoyHklGyx2D7_reOe9R34SJWjoWerT5isR3dET1pmke586g4KVBEKAq0\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","keyName":"e2e-rate-b-e58278","subscription":"e2e-rate-iso-b-e58278","tenant":"e2e-shared-b-a99cbd","userId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\",\"requestedSubscription\":\"e2e-rate-iso-b-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a99cbd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e58278","namespace":"ai-tenant-e2e-shared-b-a99cbd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","keyName":"e2e-rate-b-e58278","selected_subscription":"e2e-rate-iso-b-e58278","selected_subscription_key":"ai-tenant-e2e-shared-b-a99cbd/e2e-rate-iso-b-e58278@ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a99cbd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e58278","namespace":"ai-tenant-e2e-shared-b-a99cbd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}