--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"error","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"error","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"error","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60392","PortSpecifier":{"PortValue":60392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e2115cc-6173-4d82-8a96-bcf60d414549","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60392","PortSpecifier":{"PortValue":60392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580019,"nanos":230124245},"http":{"id":"7e2115cc-6173-4d82-8a96-bcf60d414549","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e2115cc-6173-4d82-8a96-bcf60d414549","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44456","PortSpecifier":{"PortValue":44456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f7c91ad-e315-4c0f-8694-23341abe259f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44456","PortSpecifier":{"PortValue":44456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580019,"nanos":279033375},"http":{"id":"2f7c91ad-e315-4c0f-8694-23341abe259f","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f7c91ad-e315-4c0f-8694-23341abe259f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44468","PortSpecifier":{"PortValue":44468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44468","PortSpecifier":{"PortValue":44468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580019,"nanos":336507586},"http":{"id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","method":"GET","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q4YOVQcAIpGQYaXT_ZWH8EYlct195DoWwiQnoP7DqPX627uQNO9KBgWfmEXN"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q4YOVQcAIpGQYaXT_ZWH8EYlct195DoWwiQnoP7DqPX627uQNO9KBgWfmEXN\"}"}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-20T20:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbe703b7-058c-9b71-b3e7-7bd439d8dd7c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"debug","ts":"2026-07-20T20:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56694","PortSpecifier":{"PortValue":56694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68fd2b46-7748-4173-b4dd-4a160e091715","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56694","PortSpecifier":{"PortValue":56694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580036,"nanos":551553680},"http":{"id":"68fd2b46-7748-4173-b4dd-4a160e091715","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68fd2b46-7748-4173-b4dd-4a160e091715","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14eb28e-52ff-43d8-802b-94920a445182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50004","PortSpecifier":{"PortValue":50004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e14eb28e-52ff-43d8-802b-94920a445182","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14eb28e-52ff-43d8-802b-94920a445182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50004","PortSpecifier":{"PortValue":50004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580036,"nanos":589688105},"http":{"id":"e14eb28e-52ff-43d8-802b-94920a445182","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e14eb28e-52ff-43d8-802b-94920a445182","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e14eb28e-52ff-43d8-802b-94920a445182","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14eb28e-52ff-43d8-802b-94920a445182","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14eb28e-52ff-43d8-802b-94920a445182","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14eb28e-52ff-43d8-802b-94920a445182","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13536d9-0a14-4f20-9576-032e48627f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56710","PortSpecifier":{"PortValue":56710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b13536d9-0a14-4f20-9576-032e48627f85","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13536d9-0a14-4f20-9576-032e48627f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56710","PortSpecifier":{"PortValue":56710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580036,"nanos":633714134},"http":{"id":"b13536d9-0a14-4f20-9576-032e48627f85","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b13536d9-0a14-4f20-9576-032e48627f85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b13536d9-0a14-4f20-9576-032e48627f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13536d9-0a14-4f20-9576-032e48627f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13536d9-0a14-4f20-9576-032e48627f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13536d9-0a14-4f20-9576-032e48627f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09421c44-5618-4a22-8664-4db4807a9cfd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580036,"nanos":671800989},"http":{"id":"09421c44-5618-4a22-8664-4db4807a9cfd","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09421c44-5618-4a22-8664-4db4807a9cfd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"error","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"debug","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38270","PortSpecifier":{"PortValue":38270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38270","PortSpecifier":{"PortValue":38270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580055,"nanos":959433584},"http":{"id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c19c88-0a0d-415e-87a3-5bd276b230bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56536","PortSpecifier":{"PortValue":56536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56536","PortSpecifier":{"PortValue":56536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580055,"nanos":993459103},"http":{"id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d4b902-dab5-406f-b9fe-fc605d86cdf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56542","PortSpecifier":{"PortValue":56542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","method":"GET","path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56542","PortSpecifier":{"PortValue":56542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580056,"nanos":32637061},"http":{"id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","method":"GET","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54e5958a-a253-4f81-b7bd-454f1cc59bfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38272","PortSpecifier":{"PortValue":38272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","method":"GET","path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38272","PortSpecifier":{"PortValue":38272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580056,"nanos":65609053},"http":{"id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","method":"GET","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a829508f-ed15-43c0-bf26-165f28f2af3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbca2854-7cb5-40b7-9cb0-07e2104d89dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:41:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"error","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"error","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08e4dd66-bd53-4099-b375-60d35cf6534a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580081,"nanos":712694945},"http":{"id":"08e4dd66-bd53-4099-b375-60d35cf6534a","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08e4dd66-bd53-4099-b375-60d35cf6534a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49976","PortSpecifier":{"PortValue":49976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49976","PortSpecifier":{"PortValue":49976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580081,"nanos":753088792},"http":{"id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/auth-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89c8cf09-1bc8-4e12-8c75-4186f5ba9635","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21dbcc13-991a-450d-89c9-2c2e61039064","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580081,"nanos":794073942},"http":{"id":"21dbcc13-991a-450d-89c9-2c2e61039064","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rAY74yxBy5366iti_x4xMY0RPqB0oP93fB4DMaPkHH5XzjJB2QcnQUa9QWlv"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rAY74yxBy5366iti_x4xMY0RPqB0oP93fB4DMaPkHH5XzjJB2QcnQUa9QWlv\"}"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a6c49b3-bd14-4968-87b0-ff966124696b","keyName":"e2e-auth-iso-a-a011df","subscription":"e2e-auth-iso-a5ae3c","tenant":"e2e-shared-a-b15c6d","userId":"3a6c49b3-bd14-4968-87b0-ff966124696b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/auth-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a5ae3c"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:41:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21dbcc13-991a-450d-89c9-2c2e61039064","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89bbb2c39e2b30f97d0de2751754669659e97b944a708282f862ba0b8b5a80ae"}
{"level":"info","ts":"2026-07-20T20:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415a6c6ee9594eff072c13a4803f08f18c0a531cf929bd88cb4bf725405e3886"}
{"level":"info","ts":"2026-07-20T20:41:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d936b95be67ca9dc585b6ff63cecf4bc3ce73718f4441f3ae59b94d192499171"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634a64f031f6c035e2b91dd00145d01e2a11fb715c8aef60a4a72955dfe932cf"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9bbab77a458171c14068caf1e74e1973a7019cec1b96aa0b25133d193c64345"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc75002e728c803a2621357bb5e38010434948e1dc069c4e68a40a7472362dd7"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a06cec20a57b8128eb34718043d2986a1d1281e81a01d76400b8323a661c5f"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6caee52e6bae74765b4b2a4abe54b3d44cff1e3ba7d42f75f8ed70f63dbf2136"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8b541d1102ece856773fd20535396b018ca1c05fe551444102243fb21eea70c"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87d42b89afebc5348268434ee7df1ed3218bd31729c90ef7c9829ab5c648e571"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f522e31dc0f49a200608d3a18b81692e963def3a7a8edf5f4e85f1ca01323ea"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2d28b3f462c99f4c5895c8140ce0101a36757554ed1ec0147e22a5ea6a41c0"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d431d79de6e4b7c69073420842a05e5106df17f901c0bec8645989db55e9719c"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbef6cd7aa89ec257dc76dbf78b9ab2cbb86c8e674cff6a186ed4b862304786"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a5ffb9c19c6ef7ce1ad3dad20278b44962b4d2f51fd340af385161232edb4d9"}
{"level":"info","ts":"2026-07-20T20:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5cc39e42fcab1914b80a549c2092a395acc09f2482ac077c24db10d5d437ba"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"error","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce"}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:42:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731"}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:42:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37108","PortSpecifier":{"PortValue":37108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37108","PortSpecifier":{"PortValue":37108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580150,"nanos":539605574},"http":{"id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/sub-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58db68a6-9ee1-4824-8da6-ebdf65befef8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42352","PortSpecifier":{"PortValue":42352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42352","PortSpecifier":{"PortValue":42352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580150,"nanos":584905189},"http":{"id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/sub-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b82078c-bbb2-45dc-9324-1d19b4033ef3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37116","PortSpecifier":{"PortValue":37116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d099195-a1c5-4c53-b524-3863ddef01ee","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37116","PortSpecifier":{"PortValue":37116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580150,"nanos":623159328},"http":{"id":"7d099195-a1c5-4c53-b524-3863ddef01ee","method":"GET","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZEdYSgwamUnUqrsm_4ABidT4tVc0BYFytjAlqBCJMYdwnk8eiLcEYdL9JvQA"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZEdYSgwamUnUqrsm_4ABidT4tVc0BYFytjAlqBCJMYdwnk8eiLcEYdL9JvQA\"}"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f4160283-6d14-4a7f-a47f-576ffc0cd5af","keyName":"e2e-sub-iso-8d7706","subscription":"e2e-a-only-4265dc","tenant":"e2e-shared-a-b15c6d","userId":"f4160283-6d14-4a7f-a47f-576ffc0cd5af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/sub-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-4265dc"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d099195-a1c5-4c53-b524-3863ddef01ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42362","PortSpecifier":{"PortValue":42362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42362","PortSpecifier":{"PortValue":42362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580150,"nanos":665317032},"http":{"id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","method":"GET","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tiBZ9kWFScHX894g_O1FrFWiDlnN5egoJgzafyPGgQYCV3JqvfnkBqNbYMgk"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tiBZ9kWFScHX894g_O1FrFWiDlnN5egoJgzafyPGgQYCV3JqvfnkBqNbYMgk\"}"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe9936d4-1597-46ec-b690-398ea74e621e","keyName":"e2e-sub-iso-a221db","subscription":"e2e-b-only-4265dc","tenant":"e2e-shared-b-40065f","userId":"fe9936d4-1597-46ec-b690-398ea74e621e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/sub-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-4265dc"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdb1ba10-5dec-4b14-b5da-e762830f90c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41686","PortSpecifier":{"PortValue":41686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41686","PortSpecifier":{"PortValue":41686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580160,"nanos":703391259},"http":{"id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/sub-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b0dfd2-ef77-4af3-b2dc-1091a8cb92a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51128","PortSpecifier":{"PortValue":51128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51128","PortSpecifier":{"PortValue":51128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580160,"nanos":737369399},"http":{"id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/sub-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45ac5cb9-22b0-42c5-b5db-6cdcc00d27f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41702","PortSpecifier":{"PortValue":41702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41702","PortSpecifier":{"PortValue":41702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580160,"nanos":770041118},"http":{"id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vXjbTuJVxdn1yVm8_Ud4aMQGcGALX6Sjt3hmwe4KTOKG9IKlmTizyur6gyqg"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vXjbTuJVxdn1yVm8_Ud4aMQGcGALX6Sjt3hmwe4KTOKG9IKlmTizyur6gyqg\"}"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c7c2f5fa-d8d3-4d56-a50a-cfc8296d17e0","keyName":"e2e-sub-iso-924ae5","subscription":"e2e-shared-sub-ab9634","tenant":"e2e-shared-a-b15c6d","userId":"c7c2f5fa-d8d3-4d56-a50a-cfc8296d17e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/sub-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ab9634"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e77ebe5-b8b3-4228-850f-91da0613ce83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4428de8-3399-4548-acd1-ddb562416959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51144","PortSpecifier":{"PortValue":51144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4428de8-3399-4548-acd1-ddb562416959","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4428de8-3399-4548-acd1-ddb562416959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51144","PortSpecifier":{"PortValue":51144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580160,"nanos":799122029},"http":{"id":"f4428de8-3399-4548-acd1-ddb562416959","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OvV0RHOOIrrZXu7M_wSdjov0hfif4xLXQPPCGplHMK1FZt9IUTPl1qAkK3Pu"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OvV0RHOOIrrZXu7M_wSdjov0hfif4xLXQPPCGplHMK1FZt9IUTPl1qAkK3Pu\"}"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02f8a23-25f1-4600-b4e9-626d97ac02d4","keyName":"e2e-sub-iso-8ff620","subscription":"e2e-shared-sub-ab9634","tenant":"e2e-shared-b-40065f","userId":"f02f8a23-25f1-4600-b4e9-626d97ac02d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4428de8-3399-4548-acd1-ddb562416959","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/sub-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ab9634"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4428de8-3399-4548-acd1-ddb562416959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4428de8-3399-4548-acd1-ddb562416959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:42:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4428de8-3399-4548-acd1-ddb562416959","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5706d6f263c0de10d559ff21d116937ee21765991b76fd828c9dd2b6780de07"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a051a1b6d76deb71d1b50b24e8e9b4f35cd82e99ec34ff90076dcbfabeabe7"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce8d18b03609e4610f0699b3001eb76d9957e719cafcce6da730b0c8fb61360"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daf51fd7ef8543c767e5a6654405772f259055542196e1b900baceb829d78111"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d122f9080028927c4aa40513a6b43c4320449fff0647743d552af07cdf5ccc0"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b57d691907dfe6b03ab45859c057e29df3b7f8e0a2150c10b6dc578577f9fa"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c820f63597a814c9cc70aeb9f909d9733667f6e91c15a44999b880c81b7517ce"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a858b9022828e21c3f777303e0d92f8d4e18ca7e90e7f8f98d131d0ad690419e"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/439d6e4ff162c01d95dc0e914068c3c4f1f5666eeeeec8906e82a1756922e123"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90d432bf66b39432024a50e1a0f5b2e854b001234ead4cc7df420cefc7d485b3"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af598d62e7c35244131d2f06679b12268ba6b618a8eb9af8f69de4bbb10fcee8"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15f68f94b0e1b4b665c89feaa201c73d2096f1a545565eadb1e19e0d80f63e97"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e859d6c6d55ee581f5531918823b9995687b601c92c0c12353348b62fd3731"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9bea66745f5bea92f8dd7e5d831d6065bac42daec45c8145e7a5c5f89adf10"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbc9c37d3d5a26823b87efe2c85d66d738faa3ae5ef4e4b023ed8d57b54fb86a"}
{"level":"info","ts":"2026-07-20T20:42:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5faf1b3a0f06d9173e812cb77095ba9354ce0faa86b759acf533214c795adaa9"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"}
{"level":"error","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"error","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"error","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:44:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T20:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43296","PortSpecifier":{"PortValue":43296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e906215f-436c-4edf-8164-b9ddd2cf048c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43296","PortSpecifier":{"PortValue":43296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580248,"nanos":944742881},"http":{"id":"e906215f-436c-4edf-8164-b9ddd2cf048c","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e906215f-436c-4edf-8164-b9ddd2cf048c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41830","PortSpecifier":{"PortValue":41830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11a98acf-d239-41c0-8044-cb710a6652c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41830","PortSpecifier":{"PortValue":41830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580248,"nanos":987753411},"http":{"id":"11a98acf-d239-41c0-8044-cb710a6652c4","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11a98acf-d239-41c0-8044-cb710a6652c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756b0834-02e7-4035-9f3b-31536622a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"756b0834-02e7-4035-9f3b-31536622a520","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"756b0834-02e7-4035-9f3b-31536622a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580249,"nanos":29280874},"http":{"id":"756b0834-02e7-4035-9f3b-31536622a520","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"756b0834-02e7-4035-9f3b-31536622a520","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"756b0834-02e7-4035-9f3b-31536622a520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756b0834-02e7-4035-9f3b-31536622a520","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"756b0834-02e7-4035-9f3b-31536622a520","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580250,"nanos":92139549},"http":{"id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c60b39-44fb-4472-a9ce-16e2c5b7b683","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7eee8fc3-d725-4538-bcc8-59607b625822","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580251,"nanos":140124380},"http":{"id":"7eee8fc3-d725-4538-bcc8-59607b625822","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eee8fc3-d725-4538-bcc8-59607b625822","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580252,"nanos":175397966},"http":{"id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20602b8e-00ac-4746-8e69-24eeaf3577ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580253,"nanos":214123702},"http":{"id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdbd8a6-a680-49c8-b9da-d8220da412df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50296","PortSpecifier":{"PortValue":50296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50296","PortSpecifier":{"PortValue":50296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580254,"nanos":254522162},"http":{"id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2167acc-fc09-40b1-8384-bb2b0947a7f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580255,"nanos":289313823},"http":{"id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Z8H75cP6w7ZiV5G_gaC1V0eET8M42r3vr1VjTPrpHYc384hs4LbVhROkMyP\"}"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","subscription":"e2e-rate-iso-a-842561","tenant":"e2e-shared-a-b15c6d","userId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-842561\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-842561"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9241e385-5355-4d7e-86ca-b3cf1b2fb47f","keyName":"e2e-rate-a-842561","selected_subscription":"e2e-rate-iso-a-842561","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-842561@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-842561","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ea5948-3051-42ae-a3fe-4549e3d191a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"332359ef-aa96-427a-b33f-983096643ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50302","PortSpecifier":{"PortValue":50302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"332359ef-aa96-427a-b33f-983096643ae5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"332359ef-aa96-427a-b33f-983096643ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50302","PortSpecifier":{"PortValue":50302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580263,"nanos":945037463},"http":{"id":"332359ef-aa96-427a-b33f-983096643ae5","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"332359ef-aa96-427a-b33f-983096643ae5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"332359ef-aa96-427a-b33f-983096643ae5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"332359ef-aa96-427a-b33f-983096643ae5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"332359ef-aa96-427a-b33f-983096643ae5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"332359ef-aa96-427a-b33f-983096643ae5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580264,"nanos":5170966},"http":{"id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"]}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2615c31cc134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c4b7e78b-2015-4938-a12e-12bbc1e91ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61e8e99-2dd2-4b96-8fdd-af184c5d12c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26e576c-8ea9-421e-b2ba-b5687e135fe0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50316","PortSpecifier":{"PortValue":50316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50316","PortSpecifier":{"PortValue":50316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580264,"nanos":43808466},"http":{"id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a506756d-68fc-4e24-9611-37b6ab7f6fed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"955437c5-c2f8-45b0-b288-8a404eedd261","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580265,"nanos":83124603},"http":{"id":"955437c5-c2f8-45b0-b288-8a404eedd261","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"955437c5-c2f8-45b0-b288-8a404eedd261","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"358e387c-07df-47f2-ad24-3af546de790f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51994","PortSpecifier":{"PortValue":51994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"358e387c-07df-47f2-ad24-3af546de790f","method":"POST","path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions","host":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"358e387c-07df-47f2-ad24-3af546de790f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51994","PortSpecifier":{"PortValue":51994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580266,"nanos":141216637},"http":{"id":"358e387c-07df-47f2-ad24-3af546de790f","method":"POST","headers":{":authority":"e2e-shared-a-b15c6d.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPcXkSQm0f5zun0b_hWJadVYsDzHVxTOmFnP9FoEw5fRVD77lQDLc3VeE2sM\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","subscription":"e2e-rate-iso-a-9dd611","tenant":"e2e-shared-a-b15c6d","userId":"dfaf9e4d-883c-4f47-b524-7429938b583e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\",\"requestedSubscription\":\"e2e-rate-iso-a-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b15c6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"358e387c-07df-47f2-ad24-3af546de790f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b15c6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"358e387c-07df-47f2-ad24-3af546de790f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dfaf9e4d-883c-4f47-b524-7429938b583e","keyName":"e2e-rate-a-9dd611","selected_subscription":"e2e-rate-iso-a-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-a-b15c6d/e2e-rate-iso-a-9dd611@ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b15c6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9dd611","namespace":"ai-tenant-e2e-shared-a-b15c6d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b15c6d/rate-test-model-b15c6d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"358e387c-07df-47f2-ad24-3af546de790f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"358e387c-07df-47f2-ad24-3af546de790f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","method":"POST","path":"/ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f/v1/completions","host":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784580266,"nanos":188697349},"http":{"id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","method":"POST","headers":{":authority":"e2e-shared-b-40065f.apps.32552224-aabc-47c4-b7b6-2615c31cc134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5PERia7MBjztn3xK_fOlQ6HrZlvqVCzZza7gPP5PkHi8Oc98aIC0tNUJsBnK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5PERia7MBjztn3xK_fOlQ6HrZlvqVCzZza7gPP5PkHi8Oc98aIC0tNUJsBnK\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"461e2656-f43d-4618-9f5f-72f68e7001eb","keyName":"e2e-rate-b-9dd611","subscription":"e2e-rate-iso-b-9dd611","tenant":"e2e-shared-b-40065f","userId":"461e2656-f43d-4618-9f5f-72f68e7001eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\",\"requestedSubscription\":\"e2e-rate-iso-b-9dd611\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-40065f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-40065f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9dd611","namespace":"ai-tenant-e2e-shared-b-40065f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f"}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-40065f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9dd611"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"461e2656-f43d-4618-9f5f-72f68e7001eb","keyName":"e2e-rate-b-9dd611","selected_subscription":"e2e-rate-iso-b-9dd611","selected_subscription_key":"ai-tenant-e2e-shared-b-40065f/e2e-rate-iso-b-9dd611@ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-40065f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9dd611","namespace":"ai-tenant-e2e-shared-b-40065f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-40065f/rate-test-model-40065f"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T20:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9fdddd5-c886-4c31-9d38-3f0bc4205ae2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/928863c1a63f0393ff83f2aa7711b5396a19f66c29c96f31370f89eaddd3ea9c"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb2706606d938ba6988d9699930c18e99516078f6d55ea79b289de67b1412de"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c80c40437332c2bef7fa8265b9431aaae3890142bd46a4ab8a7f0904205a31b7"}
{"level":"info","ts":"2026-07-20T20:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c41e86b4390b62510d56965ead80e2f5516f9befcd59d51744e9d8380b8d187"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9072704da2600004bdeac5b0c1dce7692819beeb6c5029965dd31dadff681231"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df98396eee57c297575ed988e1b1b7e51332e2401d59ff5d5e20ecd95575bd5"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/414dedd02ea11aafa0ee484acf37b4fc39fd6f4322d01fefe6efb1552df9f926"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b142401be31a72458f98dd1273250f65791e8e680873a29d71f31d612799bb"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141cfa9308ed238817c2fb3260e52ca5715bb67728f78ad9c4b3c8e849502eb6"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab572c7c599eb528e77c1d8cb07300a77a00e584f5375cdc3085ee0c9d2a3ba7"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82fd550a998f22a6d497e7b9d840939ef67ef14ad08c8d81789b02121a53b37e"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc0fb8738bb2990f44d0a70e294ce4230bb43f117a6deae97cf3b244e6033b7"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35031147d34d0e9aaeb3407ecb5bf140755a459080ba2608cc4d9a25b8d32b05"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c0a9c2de0ab7ebad4a8bd038a59c8a5358424d78d4647ef18a5fd57747a018"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314f630bed31d8488564398b48ca91e7a1e8e6ae0d18ff81896752f8f542b7ee"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a179afd8ddda76aced4cd885feb81ce3fc65bcc86519ec1cb30a68695195d595"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36746ac7c8cd018f59683c7b43386f95483a121a80c852e3b7421f0beda8d71c"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ff91e8d49f287223fc2165a195d07c83dd418a83f52c7b5db8c5cbf4ca222a"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecc5394b12bf2b39b9018c3c6ec61d55ff3cf3f82137ec5975a83ba3bb6e286a"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d092fae0f8d82c996a6d829ca06e4621a8aa5ce89f67ef18db0bd796eeba45e"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac4219c8ef036f7d98b2d4f23b028b85a2714d3bcd68eaf011a21b75722a0414"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace1f4fa8482bcd790c0fa558bfed74370c64927a77d8cf04cc1dbe3140210b1"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7241a36f53cfee3cb10bdcce6e899462bd5a7ce9f7fb538951e01e8ec9e82e87"}
{"level":"info","ts":"2026-07-20T20:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8dabd430d397d1ea9b686c70e30f0213b7bc6258e6c96caa5f6d9dbc5be0f24"}