--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2"}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d"}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c"}
{"level":"debug","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d"}
{"level":"info","ts":"2026-07-15T08:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c"}
{"level":"info","ts":"2026-07-15T08:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e644331323fc0abca19b86f428536fdfb4a207ea245f3e84fe0906ee8cf590b2"}
{"level":"info","ts":"2026-07-15T08:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0261364965fb79cf9010fc3977d3731e6ea035ad4a6fa0d612a5f0733ed88ea7"}
{"level":"info","ts":"2026-07-15T08:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4597bc73ad66baca4515396e3666c98fbd83804f11c63d0baed0cfe123bdc7ef"}
{"level":"info","ts":"2026-07-15T08:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19b96044060aa64e43aaaee7e60f1a1b72289f461273e3896692407bba2f2369"}
{"level":"info","ts":"2026-07-15T08:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8483f89904d92a6947bb0d2f0bbee463e826ba87a1b43785e5df0a0becba47d"}
{"level":"info","ts":"2026-07-15T08:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35821992803c5cc917b13a95bdad0237c0e18446fa4cd4c2f895616a72a0d3f2"}
{"level":"info","ts":"2026-07-15T08:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f93f187cb128cd34036f7ef2a2e4609fe2fb3f8f43e4eafa8523400b5a6c47a"}
{"level":"info","ts":"2026-07-15T08:40:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de0edfd550e7de573ce5a834d44533302844df9da5296587f405dde54b0f8e4c"}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"error","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"error","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"error","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc"}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30"}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"info","ts":"2026-07-15T08:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"}
{"level":"error","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580"}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656"}
{"level":"error","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"debug","ts":"2026-07-15T08:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104955,"nanos":8740568},"http":{"id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bc5f85-dca3-45e1-83f5-57a84123c2ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51862","PortSpecifier":{"PortValue":51862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51862","PortSpecifier":{"PortValue":51862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104955,"nanos":78242361},"http":{"id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8723d8d-f53c-4e15-8f6e-dc5bbd354bd9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36336","PortSpecifier":{"PortValue":36336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","method":"GET","path":"/maas-api/v1/api-keys/d6d121eb-ec4a-466a-9f9b-ebceccd6344d","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36336","PortSpecifier":{"PortValue":36336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104955,"nanos":140572463},"http":{"id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","method":"GET","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6d121eb-ec4a-466a-9f9b-ebceccd6344d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6d121eb-ec4a-466a-9f9b-ebceccd6344d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b302abae-7ad0-4ea7-b3d6-cbea3bfa64d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51874","PortSpecifier":{"PortValue":51874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"327509f0-6b84-44e6-bd30-148e5a4af552","method":"GET","path":"/maas-api/v1/api-keys/bf869bda-be79-4107-acd7-851369fe368a","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51874","PortSpecifier":{"PortValue":51874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104955,"nanos":185121370},"http":{"id":"327509f0-6b84-44e6-bd30-148e5a4af552","method":"GET","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bf869bda-be79-4107-acd7-851369fe368a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bf869bda-be79-4107-acd7-851369fe368a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327509f0-6b84-44e6-bd30-148e5a4af552","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48208","PortSpecifier":{"PortValue":48208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48208","PortSpecifier":{"PortValue":48208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104979,"nanos":754770910},"http":{"id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c0a6aa-d3f6-4b37-a884-9fd8ef624838","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50772","PortSpecifier":{"PortValue":50772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50772","PortSpecifier":{"PortValue":50772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104979,"nanos":799335383},"http":{"id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ff7d26-d4a2-4b9f-9610-642350b1b6a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104979,"nanos":838978248},"http":{"id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","method":"GET","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J4ImE2HRinXgxh8W_g7HzIrTDiO7JE8Cy49FR8JS5EuSNsGg4HrXVb3TtHP"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J4ImE2HRinXgxh8W_g7HzIrTDiO7JE8Cy49FR8JS5EuSNsGg4HrXVb3TtHP\"}"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12506a98-3b37-4e0b-9307-d35eec892fbb","keyName":"e2e-auth-iso-a-8c3fd9","subscription":"e2e-auth-iso-fbc89d","tenant":"e2e-shared-a-8e59d0","userId":"12506a98-3b37-4e0b-9307-d35eec892fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fbc89d"}
{"level":"info","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:42:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c67e8c9-e214-4ac8-a128-c1e5c68b6575","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51212","PortSpecifier":{"PortValue":51212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c63e1ce-9404-47cc-b025-70a4085d0503","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51212","PortSpecifier":{"PortValue":51212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104997,"nanos":145788836},"http":{"id":"8c63e1ce-9404-47cc-b025-70a4085d0503","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c63e1ce-9404-47cc-b025-70a4085d0503","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104997,"nanos":184740725},"http":{"id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b33cdaac-0422-4bdb-9e9c-a276542584e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50070","PortSpecifier":{"PortValue":50070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50070","PortSpecifier":{"PortValue":50070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784104997,"nanos":222870836},"http":{"id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","method":"GET","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fogoQwIIA5c9AxFq_30YjafFvaxx6UitK4IolHcvGIhmrPsPQvNQNTTARxVM"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fogoQwIIA5c9AxFq_30YjafFvaxx6UitK4IolHcvGIhmrPsPQvNQNTTARxVM\"}"}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T08:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f453d08e-e266-4dbe-97f5-4b1bd59cc38e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce503ec4-cd6b-4479-81f9-201238002d0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105016,"nanos":615495705},"http":{"id":"ce503ec4-cd6b-4479-81f9-201238002d0f","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce503ec4-cd6b-4479-81f9-201238002d0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33498","PortSpecifier":{"PortValue":33498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33498","PortSpecifier":{"PortValue":33498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105016,"nanos":653339666},"http":{"id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f948fad-3b5b-4dc9-81aa-55d661a5ccb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57076","PortSpecifier":{"PortValue":57076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57076","PortSpecifier":{"PortValue":57076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105016,"nanos":693358369},"http":{"id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29b6657-45a7-4df7-8a48-35a7bce7f46e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105016,"nanos":730696876},"http":{"id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1f443e-c8dc-4ba9-abd5-f599a5ef855b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105034,"nanos":41227741},"http":{"id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0130a9df-0971-4f7d-902a-c6bec56b89cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39508","PortSpecifier":{"PortValue":39508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39508","PortSpecifier":{"PortValue":39508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105034,"nanos":77585163},"http":{"id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c01afa2d-9dd3-4002-a94d-6cb835704f6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39520","PortSpecifier":{"PortValue":39520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c36f0562-f6cb-4814-9299-6c2eaefde484","method":"GET","path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39520","PortSpecifier":{"PortValue":39520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105034,"nanos":115614338},"http":{"id":"c36f0562-f6cb-4814-9299-6c2eaefde484","method":"GET","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c36f0562-f6cb-4814-9299-6c2eaefde484","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57198","PortSpecifier":{"PortValue":57198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","method":"GET","path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57198","PortSpecifier":{"PortValue":57198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105034,"nanos":149330839},"http":{"id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","method":"GET","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81201dc7-c5d3-4d55-a7ff-d4b0890d4044",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:43:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f13456b-afc7-4a18-8910-a8d8575daf8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"270d8360-54cd-4afa-9018-c72429c98a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47612","PortSpecifier":{"PortValue":47612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"270d8360-54cd-4afa-9018-c72429c98a66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"270d8360-54cd-4afa-9018-c72429c98a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47612","PortSpecifier":{"PortValue":47612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105051,"nanos":427939206},"http":{"id":"270d8360-54cd-4afa-9018-c72429c98a66","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"270d8360-54cd-4afa-9018-c72429c98a66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"270d8360-54cd-4afa-9018-c72429c98a66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"270d8360-54cd-4afa-9018-c72429c98a66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"270d8360-54cd-4afa-9018-c72429c98a66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"270d8360-54cd-4afa-9018-c72429c98a66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55686","PortSpecifier":{"PortValue":55686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55686","PortSpecifier":{"PortValue":55686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105051,"nanos":467075755},"http":{"id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/auth-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba7ddcd6-ae69-4ce1-8598-f2c0064fdcf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105051,"nanos":506628858},"http":{"id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gYRI0wwwBdAQaizH_SQO3sdVIDv1NUiF1uHaPCo51sFhwds937qTcqw4FfTf"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gYRI0wwwBdAQaizH_SQO3sdVIDv1NUiF1uHaPCo51sFhwds937qTcqw4FfTf\"}"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec54e4b8-9dd9-4388-bb1e-2ad3b4e4102e","keyName":"e2e-auth-iso-a-d300a9","subscription":"e2e-auth-iso-cbd42b","tenant":"e2e-shared-a-8e59d0","userId":"ec54e4b8-9dd9-4388-bb1e-2ad3b4e4102e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/auth-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cbd42b"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:44:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50c21719-5e3d-4c5d-b011-3968ac901d7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f27045aa22ad2ac4ca3c3d2e7d6021f2aaca142c77216ca7defd6aa6bf5d56"}
{"level":"info","ts":"2026-07-15T08:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f50c45c69adc5bebbb5c7ca7ca5573cb96223e8556d4fdb942131615c827e32"}
{"level":"info","ts":"2026-07-15T08:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2365781ebd70edc651f4fc339b5c359d82b0355722dc81c1073aaf79621ad0fc"}
{"level":"info","ts":"2026-07-15T08:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9163b997119945a4cd10bd298c98082c6deb799b0c92c2fbef9a70ae366c5a30"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91ce45d7ed4274c7967bf43703a889c973009b132955a5573ecd2edee30a580"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1e2b6d63008d151e5651de8270ab219d51fc71129d5f17e71daf4b25fee5093"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49748308d7fbc98404774d1c9b92d89db77db9b1dfa55e30846913d9747dea33"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18c991c5f6d510578c31e5c2db5de4e1de6d9b643d57300c892d3fe2a609bc76"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9965ce6879e8655d1631496e762126cea28c699f4e9c1c11a664f0ee1dacb6ac"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0969334723ae34171836ffc485142e09a7e004c95f461a1443ed36604b0661c3"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa9540883b762398439f068961138d545a1fa65d610fd32756fe1bab40b17d48"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb52762149146b633cf9a76f664507449da976d36632633bfac2ee63a51132f1"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f982cd0e15231648a827e8b20f32a709dab42be1b20aa0e3266442eb239416c6"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa4ec8c6fd56d133f9f250ce643c0e3414f59fe25a0596dc82df5eb1f95a27fa"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8818e6b3b8550e9e34ed0ae776c873cf2e9daf362d0484bd40c401d7053e6420"}
{"level":"info","ts":"2026-07-15T08:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97da45b2a89ae59538d77e0cd6cc58a6ec2672f145735e5e56749bb9b099d656"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"error","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"}
{"level":"error","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"error","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"}
{"level":"error","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"debug","ts":"2026-07-15T08:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:45:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"debug","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53862","PortSpecifier":{"PortValue":53862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"951ee052-c421-4acf-9ede-4968e17ab49a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53862","PortSpecifier":{"PortValue":53862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105127,"nanos":879141867},"http":{"id":"951ee052-c421-4acf-9ede-4968e17ab49a","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/sub-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951ee052-c421-4acf-9ede-4968e17ab49a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40152","PortSpecifier":{"PortValue":40152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40152","PortSpecifier":{"PortValue":40152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105127,"nanos":923885327},"http":{"id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/sub-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3edd35b-b842-4c93-b517-ff5987f2cfe5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53870","PortSpecifier":{"PortValue":53870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43092586-603d-4fca-9b0a-2014fa2eeb67","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53870","PortSpecifier":{"PortValue":53870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105127,"nanos":964724852},"http":{"id":"43092586-603d-4fca-9b0a-2014fa2eeb67","method":"GET","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7XZaAvkh2FTVMW14_xpPLXVVGkBamaxBlLqXp6cHen0OKrBgZL4md7lwBJmR"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7XZaAvkh2FTVMW14_xpPLXVVGkBamaxBlLqXp6cHen0OKrBgZL4md7lwBJmR\"}"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fbb19c53-b325-4a4a-a89e-0b124e58abc3","keyName":"e2e-sub-iso-8e52d7","subscription":"e2e-a-only-39569f","tenant":"e2e-shared-a-8e59d0","userId":"fbb19c53-b325-4a4a-a89e-0b124e58abc3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/sub-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-39569f"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43092586-603d-4fca-9b0a-2014fa2eeb67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40160","PortSpecifier":{"PortValue":40160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40160","PortSpecifier":{"PortValue":40160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105128,"nanos":10684296},"http":{"id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","method":"GET","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uM8Wd9d2BvVrgA7E_VYnR7YFjZUADHNOtJ3Dj7hDOlzkKoyq6AHIsFmZuzT3"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uM8Wd9d2BvVrgA7E_VYnR7YFjZUADHNOtJ3Dj7hDOlzkKoyq6AHIsFmZuzT3\"}"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7918229-e5d9-4d6e-9379-b451336e38c5","keyName":"e2e-sub-iso-fdc791","subscription":"e2e-b-only-39569f","tenant":"e2e-shared-b-1db148","userId":"d7918229-e5d9-4d6e-9379-b451336e38c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/sub-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-39569f"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39bf9c1b-ef41-4a46-8052-7e330791fdd2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"530b9867-bcff-4281-9776-3a94d43c492e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52814","PortSpecifier":{"PortValue":52814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"530b9867-bcff-4281-9776-3a94d43c492e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"530b9867-bcff-4281-9776-3a94d43c492e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52814","PortSpecifier":{"PortValue":52814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105146,"nanos":816538575},"http":{"id":"530b9867-bcff-4281-9776-3a94d43c492e","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"530b9867-bcff-4281-9776-3a94d43c492e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"530b9867-bcff-4281-9776-3a94d43c492e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/sub-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"530b9867-bcff-4281-9776-3a94d43c492e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"530b9867-bcff-4281-9776-3a94d43c492e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"530b9867-bcff-4281-9776-3a94d43c492e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57088","PortSpecifier":{"PortValue":57088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57088","PortSpecifier":{"PortValue":57088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105146,"nanos":852198020},"http":{"id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/sub-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd89efe8-35a7-4ac6-8f94-cf5e33da7395","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52826","PortSpecifier":{"PortValue":52826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"236635fc-fe84-4ced-b892-afd19a3a8e68","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52826","PortSpecifier":{"PortValue":52826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105146,"nanos":891362428},"http":{"id":"236635fc-fe84-4ced-b892-afd19a3a8e68","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SPzVorNuGM5d6eSP_fzzI5ZHQmoulxRwAGq1mrm8V4MKWrgp7qkhHeX4koTB"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SPzVorNuGM5d6eSP_fzzI5ZHQmoulxRwAGq1mrm8V4MKWrgp7qkhHeX4koTB\"}"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5697d042-a871-432a-957d-07e523d35fb2","keyName":"e2e-sub-iso-b69caa","subscription":"e2e-shared-sub-0b1cee","tenant":"e2e-shared-a-8e59d0","userId":"5697d042-a871-432a-957d-07e523d35fb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/sub-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0b1cee"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236635fc-fe84-4ced-b892-afd19a3a8e68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676dbf1d-7589-4937-83b2-c608573e656a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57090","PortSpecifier":{"PortValue":57090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"676dbf1d-7589-4937-83b2-c608573e656a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676dbf1d-7589-4937-83b2-c608573e656a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57090","PortSpecifier":{"PortValue":57090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105146,"nanos":924309082},"http":{"id":"676dbf1d-7589-4937-83b2-c608573e656a","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18avJTap8AoO6zdiV_Hu4yU410AbkxUSUphT6FdQtkbqtze1wEIzCEQ3UCRqU"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18avJTap8AoO6zdiV_Hu4yU410AbkxUSUphT6FdQtkbqtze1wEIzCEQ3UCRqU\"}"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8c453e60-84fc-4290-87f9-3cc670e21844","keyName":"e2e-sub-iso-1d3108","subscription":"e2e-shared-sub-0b1cee","tenant":"e2e-shared-b-1db148","userId":"8c453e60-84fc-4290-87f9-3cc670e21844","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"676dbf1d-7589-4937-83b2-c608573e656a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/sub-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676dbf1d-7589-4937-83b2-c608573e656a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0b1cee"}
{"level":"info","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676dbf1d-7589-4937-83b2-c608573e656a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676dbf1d-7589-4937-83b2-c608573e656a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee124c06ffaa0e3b402c1e2619d63918349bb07ccbcd088ce442a1baa842246e"}
{"level":"info","ts":"2026-07-15T08:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1232743894cee66f101598cf2a3a55d962666ee6c76d999e8011e1a3bc4cc82"}
{"level":"info","ts":"2026-07-15T08:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9637b1344030eaa1059466006c0bae41748491dfcdbcb40055e0518d20e4c081"}
{"level":"info","ts":"2026-07-15T08:45:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41f96c8ee8c32bb2ac0fb4e3783f05f99f208bc4f55aee6877ee68a3f063221b"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6efe5756e3a6d198d368dc565a4534caf6bfe3c3d0df0f47298435cda0330e"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e74d4ecb34aa583e0e5da0edcd08894a9c64baefa9d190ab2ef728ed24b7890"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeface6ba85ba8cef4d2f2392a381f6068ab03c066219a0cefdf481587de6221"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7357202f985089f7b377bbc2d4b9364021fd90761a55add20ccb10bbb267ca2"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2a12babfb5e3bfbba2d2aabe530b6e77e8e6eabdbf75459876ac692b6401b74"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5c3e96f320c2e5c532ba4eaae27321464df682b0654619a52873821c708f545"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f03671f8d01b15b8604593fa32a1d89d1d8b6dfbb463f0396c3f49afeedaa485"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88cb94294775434a150e52d692d7d013502ea1e79131ab15981519ba4c786d75"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2530cf0e58d1590c83969fa43ba433578962e1a36b6f5090ca8b1b53394054fd"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45274d26ffd089179a718a7a9d2058d6710dfb3233a139d4998f580077d61558"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fcf8947aad3cd53e0f1688e8ca912fe98613d11503fa9633b8606a91dfa98d9"}
{"level":"info","ts":"2026-07-15T08:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfff43b0013808d226a4dedee625b6ee6ebb700b1868af815012a906720b9a21"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"error","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"error","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"error","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"error","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34540","PortSpecifier":{"PortValue":34540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8cf799f-f710-4870-bc51-e93e7c1af839","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34540","PortSpecifier":{"PortValue":34540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":779331806},"http":{"id":"c8cf799f-f710-4870-bc51-e93e7c1af839","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19945308-cb94-4293-b98d-68ce47f43ba5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":832497500},"http":{"id":"19945308-cb94-4293-b98d-68ce47f43ba5","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34550","PortSpecifier":{"PortValue":34550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34550","PortSpecifier":{"PortValue":34550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":887263270},"http":{"id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34552","PortSpecifier":{"PortValue":34552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86a43648-d81b-4109-82fb-20c823bfd2a4","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34552","PortSpecifier":{"PortValue":34552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105256,"nanos":954199051},"http":{"id":"86a43648-d81b-4109-82fb-20c823bfd2a4","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34554","PortSpecifier":{"PortValue":34554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34554","PortSpecifier":{"PortValue":34554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105257,"nanos":991961281},"http":{"id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46588","PortSpecifier":{"PortValue":46588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46588","PortSpecifier":{"PortValue":46588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105268,"nanos":932203561},"http":{"id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4c25335-786d-424d-8dd8-fcd0cc301076","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105268,"nanos":976059416},"http":{"id":"c4c25335-786d-424d-8dd8-fcd0cc301076","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105269,"nanos":21315704},"http":{"id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46618","PortSpecifier":{"PortValue":46618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90d9af7d-8275-427d-814b-46d8cefea0ec","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46618","PortSpecifier":{"PortValue":46618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105270,"nanos":61970570},"http":{"id":"90d9af7d-8275-427d-814b-46d8cefea0ec","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46634","PortSpecifier":{"PortValue":46634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46634","PortSpecifier":{"PortValue":46634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105271,"nanos":101294871},"http":{"id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45806","PortSpecifier":{"PortValue":45806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","method":"POST","path":"/ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148/v1/completions","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45806","PortSpecifier":{"PortValue":45806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105271,"nanos":143166407},"http":{"id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19obugFpNoHiLUElv_5P5wVT8RdF4UHaNoQKuf5WVw3GvQEame1Z7qJMtPdYa"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19obugFpNoHiLUElv_5P5wVT8RdF4UHaNoQKuf5WVw3GvQEame1Z7qJMtPdYa\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","keyName":"e2e-rate-b-4eea5b","subscription":"e2e-rate-iso-b-4eea5b","tenant":"e2e-shared-b-1db148","userId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\",\"requestedSubscription\":\"e2e-rate-iso-b-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1db148","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4eea5b","namespace":"ai-tenant-e2e-shared-b-1db148","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","keyName":"e2e-rate-b-4eea5b","selected_subscription":"e2e-rate-iso-b-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-b-1db148/e2e-rate-iso-b-4eea5b@ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1db148","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4eea5b","namespace":"ai-tenant-e2e-shared-b-1db148","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}