--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9"}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9"}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"error","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:30:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:30:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"info","ts":"2026-07-06T19:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a06f403dfea390500c607ce7d6730fd48ebc680e37b1769f9dd34d93636cbcd6"}
{"level":"info","ts":"2026-07-06T19:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/823e562a68ee09db7d70b19534bad5357d5618f2401c4ae33cc6d738b5beecc3"}
{"level":"info","ts":"2026-07-06T19:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ddb36d0e7681c4c19a6105a291b8606290eaba7dcc4d10e18bb94e870479ecc"}
{"level":"info","ts":"2026-07-06T19:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2c1b1720d025542634de2fdf30d1eea8adc767e4ad23f46cb14e575eb6a7ff9"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"error","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"error","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"}
{"level":"info","ts":"2026-07-06T19:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56416","PortSpecifier":{"PortValue":56416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56416","PortSpecifier":{"PortValue":56416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366346,"nanos":423979203},"http":{"id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1550cea-b42e-4daa-b1f3-c47bc39c7229","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38086","PortSpecifier":{"PortValue":38086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38086","PortSpecifier":{"PortValue":38086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366346,"nanos":492167524},"http":{"id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a70350c9-46e0-4801-b0ec-9aae3918f3b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56428","PortSpecifier":{"PortValue":56428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","method":"GET","path":"/maas-api/v1/api-keys/96bf83df-4668-45f9-9549-deb0d88056bb","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56428","PortSpecifier":{"PortValue":56428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366346,"nanos":565685523},"http":{"id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","method":"GET","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96bf83df-4668-45f9-9549-deb0d88056bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96bf83df-4668-45f9-9549-deb0d88056bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"241ddc92-e79b-4ecd-becb-bc98c2281d99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72642b59-cf0e-423b-97c6-e6294a0249c4","method":"GET","path":"/maas-api/v1/api-keys/54f72325-0fd9-435a-8dbd-8ffe659cdaf8","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366346,"nanos":596439023},"http":{"id":"72642b59-cf0e-423b-97c6-e6294a0249c4","method":"GET","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54f72325-0fd9-435a-8dbd-8ffe659cdaf8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/54f72325-0fd9-435a-8dbd-8ffe659cdaf8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72642b59-cf0e-423b-97c6-e6294a0249c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49554","PortSpecifier":{"PortValue":49554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49554","PortSpecifier":{"PortValue":49554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366361,"nanos":731784664},"http":{"id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcaa6a2-775c-424e-93b3-bc4fe00f02cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366361,"nanos":766075689},"http":{"id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ed2f27f-0e99-4f3b-9b26-948c369b7662","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366361,"nanos":808783326},"http":{"id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","method":"GET","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ceETKaPohujd7XG4_Lr2OxY3xK69Nzv4o2Bw07s64d3AOjuEP38pFURYVPNi"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ceETKaPohujd7XG4_Lr2OxY3xK69Nzv4o2Bw07s64d3AOjuEP38pFURYVPNi\"}"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d541296-1782-4775-9e69-ea776aa08910","keyName":"e2e-auth-iso-a-6fd86f","subscription":"e2e-auth-iso-c400cc","tenant":"e2e-shared-a-3550d9","userId":"0d541296-1782-4775-9e69-ea776aa08910","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c400cc"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f68a8d-b573-4969-90bc-10171ce10ee4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48e73df3-75d6-4d40-b2de-28108e486c44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366389,"nanos":605725086},"http":{"id":"48e73df3-75d6-4d40-b2de-28108e486c44","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48e73df3-75d6-4d40-b2de-28108e486c44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54074","PortSpecifier":{"PortValue":54074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54074","PortSpecifier":{"PortValue":54074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366389,"nanos":640184703},"http":{"id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342eac74-6a34-43cf-a0fa-31389ce29a1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54082","PortSpecifier":{"PortValue":54082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6212572-1125-4c13-aaae-fe61b82ceddc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54082","PortSpecifier":{"PortValue":54082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366389,"nanos":677505607},"http":{"id":"c6212572-1125-4c13-aaae-fe61b82ceddc","method":"GET","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JiAn80Uspa2xm2rX_sCgRQw1CZ1CIzrbDjFmaGLXOrd7kZcFt3V3mXyg2fbq"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JiAn80Uspa2xm2rX_sCgRQw1CZ1CIzrbDjFmaGLXOrd7kZcFt3V3mXyg2fbq\"}"}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T19:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6212572-1125-4c13-aaae-fe61b82ceddc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8686270f-f957-4ebb-984d-7c7af388abb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366408,"nanos":925465998},"http":{"id":"8686270f-f957-4ebb-984d-7c7af388abb2","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8686270f-f957-4ebb-984d-7c7af388abb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5439b45-8609-4ad3-af77-3467e2566f72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366408,"nanos":961662559},"http":{"id":"f5439b45-8609-4ad3-af77-3467e2566f72","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5439b45-8609-4ad3-af77-3467e2566f72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49032","PortSpecifier":{"PortValue":49032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49032","PortSpecifier":{"PortValue":49032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366408,"nanos":997650949},"http":{"id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"867742b5-ef6c-4e8c-a5ff-cc16183bcf87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39882","PortSpecifier":{"PortValue":39882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c25fd89-27d0-4067-a15d-13c044e99b76","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39882","PortSpecifier":{"PortValue":39882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366409,"nanos":37009542},"http":{"id":"5c25fd89-27d0-4067-a15d-13c044e99b76","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c25fd89-27d0-4067-a15d-13c044e99b76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35404","PortSpecifier":{"PortValue":35404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94965e03-07ef-4ab2-9160-9893fdae6652","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35404","PortSpecifier":{"PortValue":35404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366424,"nanos":204257817},"http":{"id":"94965e03-07ef-4ab2-9160-9893fdae6652","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94965e03-07ef-4ab2-9160-9893fdae6652","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49954","PortSpecifier":{"PortValue":49954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94c6a290-f885-4a47-a675-97140bf1bb4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49954","PortSpecifier":{"PortValue":49954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366424,"nanos":234361510},"http":{"id":"94c6a290-f885-4a47-a675-97140bf1bb4e","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94c6a290-f885-4a47-a675-97140bf1bb4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d53895f-23a9-4335-af8d-197b9a829635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d53895f-23a9-4335-af8d-197b9a829635","method":"GET","path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d53895f-23a9-4335-af8d-197b9a829635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366424,"nanos":269774166},"http":{"id":"2d53895f-23a9-4335-af8d-197b9a829635","method":"GET","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d53895f-23a9-4335-af8d-197b9a829635","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d53895f-23a9-4335-af8d-197b9a829635","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d53895f-23a9-4335-af8d-197b9a829635","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d53895f-23a9-4335-af8d-197b9a829635","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d53895f-23a9-4335-af8d-197b9a829635","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35408","PortSpecifier":{"PortValue":35408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","method":"GET","path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35408","PortSpecifier":{"PortValue":35408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366424,"nanos":305931400},"http":{"id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","method":"GET","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc2f39af-b8a2-4cd2-9f98-f2e5495c0c54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3758346-b4e9-4fcb-8d97-bfda26a54a97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49246","PortSpecifier":{"PortValue":49246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49246","PortSpecifier":{"PortValue":49246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366439,"nanos":487164559},"http":{"id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f7098d-25c6-4eba-ab8c-3dccce58f0cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58404","PortSpecifier":{"PortValue":58404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58404","PortSpecifier":{"PortValue":58404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366439,"nanos":521237839},"http":{"id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/auth-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1709e5-6466-4b31-b7f7-467cd27864cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49260","PortSpecifier":{"PortValue":49260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7816688d-afd4-499b-b2e5-af8ffecc9514","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49260","PortSpecifier":{"PortValue":49260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366439,"nanos":553490225},"http":{"id":"7816688d-afd4-499b-b2e5-af8ffecc9514","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D8XQi7pvt3aaYJo6_kjEAqfJGo0E4b5westsVIrQNYF8H8XGJ5PyuTdG2iDX"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D8XQi7pvt3aaYJo6_kjEAqfJGo0E4b5westsVIrQNYF8H8XGJ5PyuTdG2iDX\"}"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55677a08-8d38-4548-bfe8-9aaad49e2a6e","keyName":"e2e-auth-iso-a-4bba47","subscription":"e2e-auth-iso-7cdf2f","tenant":"e2e-shared-a-3550d9","userId":"55677a08-8d38-4548-bfe8-9aaad49e2a6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/auth-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7cdf2f"}
{"level":"info","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7816688d-afd4-499b-b2e5-af8ffecc9514","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52fe8c8fd7ab5e0a44fc926287f9db429c57f6b4e012a22f9b1cd18db62512d4"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fdefb9136d5aaaaa992de655283ef632019602c084dbc8e5e0703a8c6ec49da"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e91ef9e0a1f60078b5e526846de159fd6419671bdd1343cdd0f9918bedcaa20c"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01a24f5134ca51652b2a392e821897066dab235cf88c323381f3afdad99c0371"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7759117a05800ce1d9d18d4b5eb9831d4267ebb74dbb4a25e9a723aa5c6d5697"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f076ae8dda290525081bd337800ba9b0826925c3495597aaac0898bee5ec97f"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b01f56719d5af4f7b8007a717ff2e8d97d3cebd2c116648d2c0ac1c995599a"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d7b8ccef9969270ccd58a627b62a99e435655ab132f7e83dc879e50e9648c3f"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/209fad2d2a6d7989d7fdc08024a28f086960357562cd59f7b19f24510c465eed"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e0e82ffb9105550a4a610b0fe165fe677cf98bf5c730872ee6b8c699b2d68d9"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6112cf8d2b6ef85084daf9b63db35801740d5a7790dd68271e6680fe5d240ee"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f656171dd2c03e1472119af6a5ea9741159ea013fb9027af1b98cc6ad0a56e1f"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae0ce1176c62eaffd38bb8da8216b5288214541fa023d60bf391bbce67960388"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c801acacdf854894726e2ac3c7fc1a2c5b8949d36a291871a6020f52c5eeaac1"}
{"level":"info","ts":"2026-07-06T19:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe0d23a72dbe2583efefdbd93863fb30dced08283fcc9e776548206aa3c7027"}
{"level":"info","ts":"2026-07-06T19:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75201d89d64107e33efe4ed275752ae49fb0fc12e584194411efe2f5dfefcd86"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"error","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"error","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"error","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"error","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"error","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531"}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"debug","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"debug","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"info","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"info","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"}
{"level":"info","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"info","ts":"2026-07-06T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"info","ts":"2026-07-06T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44234","PortSpecifier":{"PortValue":44234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44234","PortSpecifier":{"PortValue":44234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366523,"nanos":992217153},"http":{"id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/sub-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb378e0-9f31-4244-891f-7cd5fec2ab09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39262","PortSpecifier":{"PortValue":39262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39262","PortSpecifier":{"PortValue":39262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366524,"nanos":34261348},"http":{"id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/sub-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1951fec2-6ea1-452b-afb3-8833ddeeea07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44242","PortSpecifier":{"PortValue":44242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44242","PortSpecifier":{"PortValue":44242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366524,"nanos":74017390},"http":{"id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","method":"GET","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PUwdGMaouFTuKq7W_VcZkjwkqdcEt5JL5DEdohX0H1o4RFcfOZzqvKIauCCe"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PUwdGMaouFTuKq7W_VcZkjwkqdcEt5JL5DEdohX0H1o4RFcfOZzqvKIauCCe\"}"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"680b570e-11ed-42e3-b178-4995021cdcd0","keyName":"e2e-sub-iso-8ab304","subscription":"e2e-a-only-bf09d0","tenant":"e2e-shared-a-3550d9","userId":"680b570e-11ed-42e3-b178-4995021cdcd0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/sub-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bf09d0"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35ee3cb-ec7c-4e83-8428-964d5c676bd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366524,"nanos":112547924},"http":{"id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","method":"GET","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-llQxC2C0LA0v7OZ7_vybfaTM7UgpcJiHWWvjW9ktbnO5nkDQRSsTHwPiHUWZ"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-llQxC2C0LA0v7OZ7_vybfaTM7UgpcJiHWWvjW9ktbnO5nkDQRSsTHwPiHUWZ\"}"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1047ecb-bc5a-447b-865e-85bfa15a7b86","keyName":"e2e-sub-iso-563ef9","subscription":"e2e-b-only-bf09d0","tenant":"e2e-shared-b-06f95c","userId":"b1047ecb-bc5a-447b-865e-85bfa15a7b86","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/sub-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bf09d0"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2528b146-48ef-493e-8b2e-9ffa45cc6302","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56214","PortSpecifier":{"PortValue":56214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56214","PortSpecifier":{"PortValue":56214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366540,"nanos":651240994},"http":{"id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/sub-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac6e24c-d76f-4d75-bd24-52f0d3a37167","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47402","PortSpecifier":{"PortValue":47402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47402","PortSpecifier":{"PortValue":47402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366540,"nanos":685057682},"http":{"id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/sub-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a15da94f-2521-446a-9b6e-9a504c52ed2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43942","PortSpecifier":{"PortValue":43942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65eb7d87-7774-414a-a8d3-33668d184b97","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43942","PortSpecifier":{"PortValue":43942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366540,"nanos":721243954},"http":{"id":"65eb7d87-7774-414a-a8d3-33668d184b97","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7YbaA1ceUubuEqEk_ooxwaD7VxrpuCYGkQSeDJoSgN6gtyCcDo7bPlqdO5aq"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7YbaA1ceUubuEqEk_ooxwaD7VxrpuCYGkQSeDJoSgN6gtyCcDo7bPlqdO5aq\"}"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe904f07-25cd-4a8a-a936-239502d450b3","keyName":"e2e-sub-iso-46874a","subscription":"e2e-shared-sub-dd1ddc","tenant":"e2e-shared-a-3550d9","userId":"fe904f07-25cd-4a8a-a936-239502d450b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/sub-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dd1ddc"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65eb7d87-7774-414a-a8d3-33668d184b97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a075989-d05f-48f7-8569-bb7d5634bef6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366540,"nanos":752605618},"http":{"id":"4a075989-d05f-48f7-8569-bb7d5634bef6","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LBC4HCAf6E4V9dDO_4HxNgmqUWazTK8oXT2Zv0yhg7IBjLgf6t5ClZweFdpN"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LBC4HCAf6E4V9dDO_4HxNgmqUWazTK8oXT2Zv0yhg7IBjLgf6t5ClZweFdpN\"}"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faf6d514-83c5-4409-965e-e40a7c5720c7","keyName":"e2e-sub-iso-970ca5","subscription":"e2e-shared-sub-dd1ddc","tenant":"e2e-shared-b-06f95c","userId":"faf6d514-83c5-4409-965e-e40a7c5720c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/sub-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dd1ddc"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a075989-d05f-48f7-8569-bb7d5634bef6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbcfe857b7c5c13193e75843ffff45126eaa68640f55902d396023003161d2e9"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ad26fcac7f3a96370e199fa6959b99392f3990f57642709322f669603d5a219"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c04a4544bbcc2aa0c0453cdb0e6eb031cb0c3e15755ee17977023fe5538206"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec784e39345dc99c436e687bb45a61ced7c9bc749e468829dd79ae1f5e23d5e5"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd6c527bf1d1ddd422ac32ab5901b56b9329666059af35e0f721a1db1cb6263"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/426ef3427c4d165a9181b52d4f51defbdce6ec12641c18c9f548d4f66faa03d9"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3395951727c4d51aeac6cb2f32fdfbbf671ae2980e94067b279d391da2574b7c"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb9c885fdd1c73e5e64e4e17bb8572f0c7c47725120f95c16913ec70d38ac83"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea8179b62b8d1daab1ad7e7615ffa2b0aeac911a0c5d4bab2971183ed834f83c"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f477d3471218e6313aec91a9a0d12a60344acc06f2b8e53fc29e261abdc55da0"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47c7346c605875ae9544fdc5a357add0bc2035b6c560a331a44f00504c91e531"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce8a34dba238a0f497fce4f1d595847ad1300046e19149a8df6cba5c5e0b2e47"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d66bb5c3cc99a4b0bc2dca0ae7caf08e5272752280db08ce47ec1d3dfff832e6"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fcbc2f929030cf0c492bcf8e98ac90ae9952fc3b1f64db3a60fe1948813589f"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4af6610ce1ffaeafa47c57cdd6388ed2f69baa511e5f88adfd21641ea599727"}
{"level":"info","ts":"2026-07-06T19:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8d4ace2e45802cfc924a1ec883be66080ba83a56d445038ffa25890194906dc"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"error","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"error","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"debug","ts":"2026-07-06T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"error","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"}
{"level":"error","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"error","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"error","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"debug","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36122","PortSpecifier":{"PortValue":36122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b09d35f8-ec82-43ec-8c67-e6534193e790","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36122","PortSpecifier":{"PortValue":36122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366613,"nanos":644003273},"http":{"id":"b09d35f8-ec82-43ec-8c67-e6534193e790","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09d35f8-ec82-43ec-8c67-e6534193e790","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49966","PortSpecifier":{"PortValue":49966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49966","PortSpecifier":{"PortValue":49966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366613,"nanos":685758854},"http":{"id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640756cd-607c-4a0a-8f40-2ea8e263b2b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36124","PortSpecifier":{"PortValue":36124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36124","PortSpecifier":{"PortValue":36124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366613,"nanos":727218090},"http":{"id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H\"}"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","subscription":"e2e-rate-iso-a-46573f","tenant":"e2e-shared-a-3550d9","userId":"80f64911-64ea-4a06-8332-c21873ea614c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-46573f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46573f"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","selected_subscription":"e2e-rate-iso-a-46573f","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-46573f@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:36:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a68c9502-a4d6-4c05-acae-a9d492bcff35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36138","PortSpecifier":{"PortValue":36138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36138","PortSpecifier":{"PortValue":36138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366614,"nanos":790777918},"http":{"id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H\"}"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","subscription":"e2e-rate-iso-a-46573f","tenant":"e2e-shared-a-3550d9","userId":"80f64911-64ea-4a06-8332-c21873ea614c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-46573f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46573f"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","selected_subscription":"e2e-rate-iso-a-46573f","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-46573f@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26446162-d31a-4bf2-877d-d29a7e5b01fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36142","PortSpecifier":{"PortValue":36142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36142","PortSpecifier":{"PortValue":36142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366615,"nanos":825301487},"http":{"id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wkZISD7fQeeoKKHo_EAhWRCrkjrsQ7XS28dXebLRG67zk14a0vWR4bJp8C9H\"}"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","subscription":"e2e-rate-iso-a-46573f","tenant":"e2e-shared-a-3550d9","userId":"80f64911-64ea-4a06-8332-c21873ea614c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-46573f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46573f"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80f64911-64ea-4a06-8332-c21873ea614c","keyName":"e2e-rate-a-46573f","selected_subscription":"e2e-rate-iso-a-46573f","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-46573f@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46573f","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:36:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9881948e-9dfa-46c4-a4b6-ec848a377ca9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366626,"nanos":669951097},"http":{"id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"806cbf5c-1b3f-4581-9d90-2ae89e11e8bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54348","PortSpecifier":{"PortValue":54348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54348","PortSpecifier":{"PortValue":54348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366626,"nanos":704756115},"http":{"id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"]}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c72fb071a89"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=572c28dc-3e93-45b1-88f9-67aec94a3cf9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4b54f4-1532-47f4-973d-a4a858903db3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1f3127-f6dc-4d62-b52b-c8e61255bf51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43556","PortSpecifier":{"PortValue":43556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43556","PortSpecifier":{"PortValue":43556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366626,"nanos":743070404},"http":{"id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O\"}"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","subscription":"e2e-rate-iso-a-5063f1","tenant":"e2e-shared-a-3550d9","userId":"79078fd9-4d5c-4317-9980-a50a4f955d81","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-5063f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5063f1"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","selected_subscription":"e2e-rate-iso-a-5063f1","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-5063f1@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9129820e-2bbd-423d-acc4-7d3918dd2e37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366627,"nanos":781431062},"http":{"id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O\"}"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","subscription":"e2e-rate-iso-a-5063f1","tenant":"e2e-shared-a-3550d9","userId":"79078fd9-4d5c-4317-9980-a50a4f955d81","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-5063f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5063f1"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","selected_subscription":"e2e-rate-iso-a-5063f1","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-5063f1@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a5ab76-620a-459b-bd0d-ad2e5fe5a601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b82c805-8e9d-4591-8eb4-f914399adc28","method":"POST","path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions","host":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43582","PortSpecifier":{"PortValue":43582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366628,"nanos":817862272},"http":{"id":"8b82c805-8e9d-4591-8eb4-f914399adc28","method":"POST","headers":{":authority":"e2e-shared-a-3550d9.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19wuoYraLFd4IUdsJ_nB0sPE9YQZKQ49i3nVm86ZPOhlGg6mUJ8ro7olpgu7O\"}"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","subscription":"e2e-rate-iso-a-5063f1","tenant":"e2e-shared-a-3550d9","userId":"79078fd9-4d5c-4317-9980-a50a4f955d81","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\",\"requestedSubscription\":\"e2e-rate-iso-a-5063f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3550d9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5063f1"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79078fd9-4d5c-4317-9980-a50a4f955d81","keyName":"e2e-rate-a-5063f1","selected_subscription":"e2e-rate-iso-a-5063f1","selected_subscription_key":"ai-tenant-e2e-shared-a-3550d9/e2e-rate-iso-a-5063f1@ai-tenant-e2e-shared-a-3550d9/rate-test-model-3550d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3550d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5063f1","namespace":"ai-tenant-e2e-shared-a-3550d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b82c805-8e9d-4591-8eb4-f914399adc28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","method":"POST","path":"/ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c/v1/completions","host":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783366628,"nanos":852287887},"http":{"id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","method":"POST","headers":{":authority":"e2e-shared-b-06f95c.apps.84e049c9-f1d5-4ebf-90df-1c72fb071a89.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JPQzMfipyXTPD5t7_FjHlWq1fzeIFbBNOnUbVvdSt5xWrGBBa9a2ZFOkmZtT"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JPQzMfipyXTPD5t7_FjHlWq1fzeIFbBNOnUbVvdSt5xWrGBBa9a2ZFOkmZtT\"}"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22fcb73c-ed2d-4603-9e48-3eb16388a4cb","keyName":"e2e-rate-b-5063f1","subscription":"e2e-rate-iso-b-5063f1","tenant":"e2e-shared-b-06f95c","userId":"22fcb73c-ed2d-4603-9e48-3eb16388a4cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c\",\"requestedSubscription\":\"e2e-rate-iso-b-5063f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-06f95c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-06f95c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5063f1","namespace":"ai-tenant-e2e-shared-b-06f95c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5063f1"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22fcb73c-ed2d-4603-9e48-3eb16388a4cb","keyName":"e2e-rate-b-5063f1","selected_subscription":"e2e-rate-iso-b-5063f1","selected_subscription_key":"ai-tenant-e2e-shared-b-06f95c/e2e-rate-iso-b-5063f1@ai-tenant-e2e-shared-b-06f95c/rate-test-model-06f95c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-06f95c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5063f1","namespace":"ai-tenant-e2e-shared-b-06f95c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:37:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a46a82e-0cc8-4e5d-97f5-80b80a526f91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3480e04f5a4e438b55d05888225549ce2c803eda30f97352b9a5b7b7684e652"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4cc0728ca8b18f885aa37571240572295aa8ec73ad22289a1f38aac87e718f"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff49fddb19cc938a82fab441b0edc4210e9fa59fa71839fd44fafaf23dc098b9"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3e1df6bc54df8a27238600148b52760dcf5af65c3debe31387f56a62109ae5c"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee9a36ad5482b651c787bec8dc08a59bc3989b7d5c5c236bf812db38e53da4b"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae1a9e36ca98f83d1e22c2e5fc933d9e9ec268d97f1ab068ebfccf6618447fff"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98a0e069af98ca74019150c4e5048f6bcba75be97a1285943c58f4f7dca49c7d"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/758c9972cb22e410dce0089b71cb9081659f4149fb6abd3fa5f5e5c2e21478b0"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1fcc02bb4d3d18164d5982f58b9d1d93566b5a20967643fbece09ab79c5acf5"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872be3da21fd71e69a22589bd800e956a824683ee4e393fa86188bf7c4e0b834"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b98a7fd7d573781e592785a940e2c522be5a34c2512fc7d30f6c93ab450f5b1"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69205d0ffcb530d40ee1ce93b36290b4dcec6a88870f6805cfb1736769dacdbf"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aa8089aab8cfe4ac64a7daa407f52791bb91fa6dcc24a5b92e6a504e89ba456"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/991dee6763fb12bc9a63f1e191af7206f82f0d07f776bd21fce15f9360ca5383"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a19e4e3655ffc7bb42e8f8a8b6adbe9340530c9a05019c4a3d7a9bf2ff76900"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/111663db0e428b4956c23a6b0d5692adc5eef46fe592c56a8e2e71308457f4d0"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe479ae8b9367ed289c73575fa6442ebc4ee52eee7dde68579e2b43b8cd6615"}
{"level":"info","ts":"2026-07-06T19:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c6161619a8899eba061f141d99bde4f7e6b8814add3c666414a069559e5a2f8"}
{"level":"info","ts":"2026-07-06T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90f961193a07fa1d1db9bdcb0217829a454bb59b56b6cab65cacc466d4306849"}
{"level":"info","ts":"2026-07-06T19:38:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/626bf537c7238a625860121b12ac2c6a68360ba5a24c8646398bf8a237ec4e91"}