--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:15:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"info","ts":"2026-07-10T23:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/535cc41440b5f9a3a370424c2031f20d16fef3410cfd1da19eb4adbb8d6c4a5c"}
{"level":"info","ts":"2026-07-10T23:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0ffc22878bfe2945782f2008e4f3a5cfac6b0c6178f507a2fc7d1e014762acb"}
{"level":"info","ts":"2026-07-10T23:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/892e2ab4e09098e628eeab7e9756c04acbfa6b326f9b47fdcfdcc0a97334333b"}
{"level":"info","ts":"2026-07-10T23:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07fa5b36f91dd4a279f486c7351cb857358c8cad9814892602065e34cc76bdc1"}
{"level":"info","ts":"2026-07-10T23:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f092be4f525b9a552cd39ab5261da5fe0ffdd003157020e5786489783510080c"}
{"level":"info","ts":"2026-07-10T23:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fbe5599a563c704254cf2b01e8be08c9508c398d29e8b87c31aeb68f6e52f19"}
{"level":"info","ts":"2026-07-10T23:15:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee67356891a45bb67ce4a3c2a3a482242ad10266c1122a86960d9ba69ef75f43"}
{"level":"info","ts":"2026-07-10T23:15:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62a12df8d8a9a2d6f39a564261c1d6726733acaf2378b537e2e93bd8841c847b"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272"}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721"}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:17:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"info","ts":"2026-07-10T23:17:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064"}
{"level":"info","ts":"2026-07-10T23:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721"}
{"level":"info","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34672","PortSpecifier":{"PortValue":34672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34672","PortSpecifier":{"PortValue":34672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725442,"nanos":922520101},"http":{"id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f68a27-9d8c-477d-81e9-a35db06a47af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33832","PortSpecifier":{"PortValue":33832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33832","PortSpecifier":{"PortValue":33832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725442,"nanos":988320407},"http":{"id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a101c7f-15e9-40cd-9467-ffdfdf847d4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34684","PortSpecifier":{"PortValue":34684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","method":"GET","path":"/maas-api/v1/api-keys/b3da9bcf-0da9-42e9-b134-cf6a92ea36c8","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34684","PortSpecifier":{"PortValue":34684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725443,"nanos":49288351},"http":{"id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","method":"GET","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b3da9bcf-0da9-42e9-b134-cf6a92ea36c8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b3da9bcf-0da9-42e9-b134-cf6a92ea36c8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d7c83e9-fb60-4eae-bfe1-41ff6bee11b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33836","PortSpecifier":{"PortValue":33836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"084e4bc6-b992-415f-bd76-2b8386ea467e","method":"GET","path":"/maas-api/v1/api-keys/16da4e71-1d7a-4bc6-8e15-67f59733964d","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33836","PortSpecifier":{"PortValue":33836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725443,"nanos":87007408},"http":{"id":"084e4bc6-b992-415f-bd76-2b8386ea467e","method":"GET","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16da4e71-1d7a-4bc6-8e15-67f59733964d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/16da4e71-1d7a-4bc6-8e15-67f59733964d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"084e4bc6-b992-415f-bd76-2b8386ea467e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44462","PortSpecifier":{"PortValue":44462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc5c77cf-5caf-42c3-be90-20065235aef3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44462","PortSpecifier":{"PortValue":44462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725462,"nanos":241069222},"http":{"id":"fc5c77cf-5caf-42c3-be90-20065235aef3","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc5c77cf-5caf-42c3-be90-20065235aef3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41242","PortSpecifier":{"PortValue":41242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41242","PortSpecifier":{"PortValue":41242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725462,"nanos":283644698},"http":{"id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e07d75e8-3c27-4502-9d13-82a42f554dc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44472","PortSpecifier":{"PortValue":44472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44472","PortSpecifier":{"PortValue":44472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725462,"nanos":328264060},"http":{"id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","method":"GET","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TwPfcnGi30Yd0zIt_gbaRvXIL5fdXiy8JdW05FkKbv46dvPKZ3lNZde1Eshw"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TwPfcnGi30Yd0zIt_gbaRvXIL5fdXiy8JdW05FkKbv46dvPKZ3lNZde1Eshw\"}"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7be56bd3-a683-47f3-a101-b36b1a9d77a7","keyName":"e2e-auth-iso-a-4581a0","subscription":"e2e-auth-iso-56368e","tenant":"e2e-shared-a-6d6384","userId":"7be56bd3-a683-47f3-a101-b36b1a9d77a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-56368e"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d8c74c1-d064-4b80-88e6-e5fd21688329","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea080692-9380-49f3-9222-e3e49958c028","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea080692-9380-49f3-9222-e3e49958c028","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea080692-9380-49f3-9222-e3e49958c028","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725479,"nanos":347156818},"http":{"id":"ea080692-9380-49f3-9222-e3e49958c028","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea080692-9380-49f3-9222-e3e49958c028","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea080692-9380-49f3-9222-e3e49958c028","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea080692-9380-49f3-9222-e3e49958c028","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea080692-9380-49f3-9222-e3e49958c028","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea080692-9380-49f3-9222-e3e49958c028","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e2ae073-d414-403e-bf11-703f15c5ea52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725479,"nanos":386646095},"http":{"id":"4e2ae073-d414-403e-bf11-703f15c5ea52","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2ae073-d414-403e-bf11-703f15c5ea52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33036","PortSpecifier":{"PortValue":33036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33036","PortSpecifier":{"PortValue":33036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725479,"nanos":421173981},"http":{"id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","method":"GET","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Tdbxmav7B9SxLzGa_i9ltsLhwZPmFqKVxw2ceHC2747ItJ5sRvoa0A5cQbhN"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Tdbxmav7B9SxLzGa_i9ltsLhwZPmFqKVxw2ceHC2747ItJ5sRvoa0A5cQbhN\"}"}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T23:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5d13d6-3b37-4e42-98f1-d1f17c3c4d99","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47594","PortSpecifier":{"PortValue":47594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47594","PortSpecifier":{"PortValue":47594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725498,"nanos":620744499},"http":{"id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0bd599e-4787-40e1-a596-51fa64ebd6be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37860","PortSpecifier":{"PortValue":37860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f553c6c-756a-4bc6-a238-71350272f6c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37860","PortSpecifier":{"PortValue":37860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725498,"nanos":653589414},"http":{"id":"6f553c6c-756a-4bc6-a238-71350272f6c3","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f553c6c-756a-4bc6-a238-71350272f6c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47602","PortSpecifier":{"PortValue":47602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47602","PortSpecifier":{"PortValue":47602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725498,"nanos":691923355},"http":{"id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add92f3b-23b2-4ad3-a4c2-46f19bc46cb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37866","PortSpecifier":{"PortValue":37866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37866","PortSpecifier":{"PortValue":37866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725498,"nanos":728796671},"http":{"id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9f3825-b862-4c3e-86fe-1dd6bb91ef46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60162","PortSpecifier":{"PortValue":60162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60162","PortSpecifier":{"PortValue":60162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725515,"nanos":783034780},"http":{"id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee14aab-e711-4d7c-b636-a47d91d33c29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37352","PortSpecifier":{"PortValue":37352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37352","PortSpecifier":{"PortValue":37352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725515,"nanos":814972081},"http":{"id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5ecfd-6d4f-4c13-920b-9fa0e68868c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37360","PortSpecifier":{"PortValue":37360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b712985-4139-4576-b0ef-005e52a6dccc","method":"GET","path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37360","PortSpecifier":{"PortValue":37360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725515,"nanos":851511223},"http":{"id":"1b712985-4139-4576-b0ef-005e52a6dccc","method":"GET","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b712985-4139-4576-b0ef-005e52a6dccc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60164","PortSpecifier":{"PortValue":60164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","method":"GET","path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60164","PortSpecifier":{"PortValue":60164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725515,"nanos":882689597},"http":{"id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","method":"GET","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99e3bfa4-1af6-4e0f-b312-ad631f9338f8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7553072-d9ff-4f03-a700-f9fae79a5ecd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39760","PortSpecifier":{"PortValue":39760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf5f2b5a-452f-4339-9670-f5166f31429d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39760","PortSpecifier":{"PortValue":39760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725535,"nanos":50966781},"http":{"id":"bf5f2b5a-452f-4339-9670-f5166f31429d","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5f2b5a-452f-4339-9670-f5166f31429d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34772","PortSpecifier":{"PortValue":34772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34772","PortSpecifier":{"PortValue":34772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725535,"nanos":90125806},"http":{"id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/auth-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed85fcb-5a0c-4913-8c9d-ebf8553dc716","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39762","PortSpecifier":{"PortValue":39762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39762","PortSpecifier":{"PortValue":39762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725535,"nanos":121103939},"http":{"id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HjFfVu8xOc3itEv3_N2ribH1TyUFrUoDmRzsZJjuwWDoPnvZXy1OXzokSWum"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HjFfVu8xOc3itEv3_N2ribH1TyUFrUoDmRzsZJjuwWDoPnvZXy1OXzokSWum\"}"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9b846be-7263-480a-bb60-53b244b63f19","keyName":"e2e-auth-iso-a-fab7ae","subscription":"e2e-auth-iso-bfc202","tenant":"e2e-shared-a-6d6384","userId":"c9b846be-7263-480a-bb60-53b244b63f19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/auth-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-bfc202"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:18:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab29cf4-e2bd-41ba-8836-d5339aa3997f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d0c71bf94194a64563b6d31e33b513400b01c0e670ad93375995befc0147272"}
{"level":"info","ts":"2026-07-10T23:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f172f4050ddea3a6311bb91674970d40c227d837d89923785c174b9e8ace492"}
{"level":"info","ts":"2026-07-10T23:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d272668d94c1f6eb867ae36416b781b6ea2363d905c2071796e4ef58e688a89e"}
{"level":"info","ts":"2026-07-10T23:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1099313a2c82d7b231d0b6e15b98bbd8a5df1861935eb19c8abbede4dffe2b00"}
{"level":"info","ts":"2026-07-10T23:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7ee7829efb71f49cab7b94c8b930001dd604315464b455aace5bf442f1293f"}
{"level":"info","ts":"2026-07-10T23:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ee584f0d27ad32d2c1e9bb8e4e81379a4c13ba784de99b599ce99b06571a0b5"}
{"level":"info","ts":"2026-07-10T23:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b554794d4964df72da64118d0022ff3743e79378390cad69c035337f1c0b0737"}
{"level":"info","ts":"2026-07-10T23:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d18c1d5a05c1a68bbf7d5c31340ff9b0b4b95ba16d31e41f9c660ff76d7fcc2"}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"debug","ts":"2026-07-10T23:19:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"error","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:19:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/579d7f926967d050004ea83ab91b0f2313de03c402dffb6309488d86378151f7"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b8bdee26345676a28b7c4ad147116f0fe8130cc087fb41818356a93ae5a385b"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f07b2054e06df671466a6899f98b69d3c095f0cef8d2fbc8c59fa4da2f192721"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac24fa86156c705d35294411a9483bebd24a138d51b2c8a322ec5aef63fefc4"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1573ad90d293d92dded9ba91ebde30adc4b7b3f76a92ab3aa51dc11e865033"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a5d0c87318e167772b7313d211a31d77e0bf2dcda421fed5e78477a648bf47"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cfadca0c57e77285271efc85aa62962f646991a7374363d80ade8a08386421b"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5638ae2fec096368b3a60a76180b178f3a3303fcc0a94aaec039a62e99963064"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"error","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49"}
{"level":"info","ts":"2026-07-10T23:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"info","ts":"2026-07-10T23:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"info","ts":"2026-07-10T23:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:19:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49"}
{"level":"debug","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a"}
{"level":"debug","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"}
{"level":"info","ts":"2026-07-10T23:19:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55538","PortSpecifier":{"PortValue":55538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55538","PortSpecifier":{"PortValue":55538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725592,"nanos":590749484},"http":{"id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/sub-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59cd9784-63fb-4ab0-b4dd-0cf766cc1abc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725592,"nanos":632385236},"http":{"id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/sub-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c82080e-8695-4078-b7f0-c1b3ece3e37a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55544","PortSpecifier":{"PortValue":55544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55544","PortSpecifier":{"PortValue":55544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725592,"nanos":672175155},"http":{"id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","method":"GET","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZboZOHryF2pC7iW_RGlA0zihvPzTQzyLNAt3zpsLQSaEFGkkbGMtyRvphMb"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZboZOHryF2pC7iW_RGlA0zihvPzTQzyLNAt3zpsLQSaEFGkkbGMtyRvphMb\"}"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03a4c83b-d3a5-4ee1-a64c-f6d2e6f9552b","keyName":"e2e-sub-iso-014d87","subscription":"e2e-a-only-56c19d","tenant":"e2e-shared-a-6d6384","userId":"03a4c83b-d3a5-4ee1-a64c-f6d2e6f9552b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/sub-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-56c19d"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3ef985-cac3-4a5b-8d73-3398fdacfcfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38976","PortSpecifier":{"PortValue":38976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38976","PortSpecifier":{"PortValue":38976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725592,"nanos":708808102},"http":{"id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","method":"GET","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QYT3e4bT3AAvtdy2_Tc2Cr0vIHBTRyxsVORbE3H5RBn1aoYPNY0iBjN6bZ2O"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QYT3e4bT3AAvtdy2_Tc2Cr0vIHBTRyxsVORbE3H5RBn1aoYPNY0iBjN6bZ2O\"}"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c8fc59a-6031-4371-8187-d6f10a225612","keyName":"e2e-sub-iso-a86dd2","subscription":"e2e-b-only-56c19d","tenant":"e2e-shared-b-02c498","userId":"1c8fc59a-6031-4371-8187-d6f10a225612","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/sub-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-56c19d"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab2f0f39-5fa7-4407-af0f-f100a24388e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45266","PortSpecifier":{"PortValue":45266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45266","PortSpecifier":{"PortValue":45266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725602,"nanos":685401145},"http":{"id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/sub-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a935137b-f47d-4c0f-b0ee-3dff24aae66e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34406","PortSpecifier":{"PortValue":34406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34406","PortSpecifier":{"PortValue":34406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725602,"nanos":719666831},"http":{"id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/sub-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef82ee7e-8427-43d9-98a6-a8abd31c3905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45268","PortSpecifier":{"PortValue":45268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45268","PortSpecifier":{"PortValue":45268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725602,"nanos":755414173},"http":{"id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9XeHKSRrXj1nBUt8_pgxFyW5Ui5aq1QUtsuAm1d7gE7qgkVBwlLRsXXhSgCJ"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9XeHKSRrXj1nBUt8_pgxFyW5Ui5aq1QUtsuAm1d7gE7qgkVBwlLRsXXhSgCJ\"}"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83d136a7-3648-435c-824f-d0ee94922f21","keyName":"e2e-sub-iso-132b91","subscription":"e2e-shared-sub-a20197","tenant":"e2e-shared-a-6d6384","userId":"83d136a7-3648-435c-824f-d0ee94922f21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/sub-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a20197"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c89312-746d-4bc7-8d5a-5e14f5ce27b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34412","PortSpecifier":{"PortValue":34412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a281e0e1-159a-4835-8242-8fffac9119ab","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34412","PortSpecifier":{"PortValue":34412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725602,"nanos":788925576},"http":{"id":"a281e0e1-159a-4835-8242-8fffac9119ab","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19hHGF402nTUmuMoK_xk2mukJ0zQLCWMOcoz5gaEfDBrwiUijyBWWOhsP04zZ"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19hHGF402nTUmuMoK_xk2mukJ0zQLCWMOcoz5gaEfDBrwiUijyBWWOhsP04zZ\"}"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58d85109-5bff-4ac5-b34d-aa55cfe774e4","keyName":"e2e-sub-iso-bf20e1","subscription":"e2e-shared-sub-a20197","tenant":"e2e-shared-b-02c498","userId":"58d85109-5bff-4ac5-b34d-aa55cfe774e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/sub-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a20197"}
{"level":"info","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:20:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a281e0e1-159a-4835-8242-8fffac9119ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31fc13af4eb7b7a5250be2e3fcb29a085163603a1bb2020af4fcea9ee46a139a"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c5754ab8a6bb4e4ae90b813bcaf18dc91f44d4e60662afebef3271e4f3d166e"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc9db9642c11ed8c57ac9a2cd0029d84995f330aa4730cefbc0d4322ca522ffd"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7890decf361f28232eed3adc2298648b75e43813e32791fa8c6c7f15f69fb7d"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddb880284af3064f640eb11fba6b2713a8f8b6d5c6582525e24b864175ca09c2"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a3811e1ae2919382660aacdb5879e7d52827294ec332ea9bbfb8281211623f1"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f58e3e423dcf735ea67a115c5cca8d5367d9bfae49d8c1bcb68bce539768b49"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96f9322800bf5173468a82de3cbd89f614bfcc74e5d0baa326565cd0d1e4334"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69715151b6ef950432e9476d20bbfd2e1e9154d2fefa8ff9c7fc40c75a20f9a4"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ab8068bf6f7bb038ddda21f878d4b1bce8b15b2e4af2f652e4fd2fd858a1d01"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1e3f724d9a2dbebddd52875272b0d8496be7670d0d8aa8f6eba7346ca1f4cec"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c489ca9d8a5cf760a62a3a9d056a563e50bb2f1b2b7e3653f9e04ba2c3e79c14"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e47001165a6bd754e946ad48866b25f51337db7ef9e632d4bbcc3ff74a7bb3e9"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89eec7f05c6a3a4dd41a05830bf91925aae49b61f704a2d74a92b1dae700c14a"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48ff89eabcf3788d249f40617671cc70f90c95c3615ddb6f096a8fd956fad800"}
{"level":"info","ts":"2026-07-10T23:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a009f115e992b547953f59587d95827f90a51a5a80b891cba5d593d17a53fe0"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"info","ts":"2026-07-10T23:20:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"}
{"level":"error","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"}
{"level":"error","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"debug","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"info","ts":"2026-07-10T23:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45012","PortSpecifier":{"PortValue":45012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45012","PortSpecifier":{"PortValue":45012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725663,"nanos":255372580},"http":{"id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ff47ad-ba9e-4adb-88e3-32a53ce7bbc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34968","PortSpecifier":{"PortValue":34968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34968","PortSpecifier":{"PortValue":34968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725663,"nanos":298094856},"http":{"id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c94af7d-cddf-4085-b1e6-8f0c6eac6036","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45022","PortSpecifier":{"PortValue":45022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45022","PortSpecifier":{"PortValue":45022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725663,"nanos":337184997},"http":{"id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI\"}"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","subscription":"e2e-rate-iso-a-0328e4","tenant":"e2e-shared-a-6d6384","userId":"697116bc-46e0-46ca-ac36-23b38356121f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-0328e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0328e4"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","selected_subscription":"e2e-rate-iso-a-0328e4","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-0328e4@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38d49dc-2443-478f-b6e9-4866fad79dc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45024","PortSpecifier":{"PortValue":45024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e95f024e-0361-4b02-a12e-7eaef49883c9","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45024","PortSpecifier":{"PortValue":45024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725664,"nanos":397471992},"http":{"id":"e95f024e-0361-4b02-a12e-7eaef49883c9","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI\"}"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","subscription":"e2e-rate-iso-a-0328e4","tenant":"e2e-shared-a-6d6384","userId":"697116bc-46e0-46ca-ac36-23b38356121f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-0328e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0328e4"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","selected_subscription":"e2e-rate-iso-a-0328e4","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-0328e4@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e95f024e-0361-4b02-a12e-7eaef49883c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45034","PortSpecifier":{"PortValue":45034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45034","PortSpecifier":{"PortValue":45034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725665,"nanos":438308050},"http":{"id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M76qZGujKOPeinxl_S6zXdlt4H0Nb7vTqGsmj3pGojWApp92VpPA6IAhNWHI\"}"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","subscription":"e2e-rate-iso-a-0328e4","tenant":"e2e-shared-a-6d6384","userId":"697116bc-46e0-46ca-ac36-23b38356121f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-0328e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0328e4"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"697116bc-46e0-46ca-ac36-23b38356121f","keyName":"e2e-rate-a-0328e4","selected_subscription":"e2e-rate-iso-a-0328e4","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-0328e4@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0328e4","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1390f0-2144-4a7e-a6de-2fdfc7a178f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51966","PortSpecifier":{"PortValue":51966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"880e67e4-0b2b-4c11-88d5-5465da661815","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51966","PortSpecifier":{"PortValue":51966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725680,"nanos":388374894},"http":{"id":"880e67e4-0b2b-4c11-88d5-5465da661815","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880e67e4-0b2b-4c11-88d5-5465da661815","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725680,"nanos":427004347},"http":{"id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"314abd18-f12c-4aab-8668-e74376a552f0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"]}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9ff79dbb66cf"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cd61b70d-6b64-4ac1-9e20-9a0cc6d1381e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"314abd18-f12c-4aab-8668-e74376a552f0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27eaa5b2-b2fd-44f1-b8dc-bd2be4a31f5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51980","PortSpecifier":{"PortValue":51980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1273b192-fd8f-412d-a943-b5980bf570c0","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51980","PortSpecifier":{"PortValue":51980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725680,"nanos":462460725},"http":{"id":"1273b192-fd8f-412d-a943-b5980bf570c0","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10\"}"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","subscription":"e2e-rate-iso-a-68c3c6","tenant":"e2e-shared-a-6d6384","userId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-68c3c6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c3c6"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","selected_subscription":"e2e-rate-iso-a-68c3c6","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-68c3c6@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1273b192-fd8f-412d-a943-b5980bf570c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3898eab6-1c6c-4779-92a1-24d305b5d187","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725681,"nanos":501776665},"http":{"id":"3898eab6-1c6c-4779-92a1-24d305b5d187","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10\"}"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","subscription":"e2e-rate-iso-a-68c3c6","tenant":"e2e-shared-a-6d6384","userId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-68c3c6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c3c6"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","selected_subscription":"e2e-rate-iso-a-68c3c6","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-68c3c6@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3898eab6-1c6c-4779-92a1-24d305b5d187","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52010","PortSpecifier":{"PortValue":52010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69077c28-4cb0-41e6-b68e-33607d3a3275","method":"POST","path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions","host":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52010","PortSpecifier":{"PortValue":52010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725682,"nanos":563747651},"http":{"id":"69077c28-4cb0-41e6-b68e-33607d3a3275","method":"POST","headers":{":authority":"e2e-shared-a-6d6384.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FdEQ51qBu3xJFMDW_GQfMXA4xYAcyURF2NNESZc4BQET3PmTiuWMo3DJYi10\"}"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","subscription":"e2e-rate-iso-a-68c3c6","tenant":"e2e-shared-a-6d6384","userId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\",\"requestedSubscription\":\"e2e-rate-iso-a-68c3c6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6d6384.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c3c6"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"42c65dae-5a8c-4b89-ba4e-9bbff33aef92","keyName":"e2e-rate-a-68c3c6","selected_subscription":"e2e-rate-iso-a-68c3c6","selected_subscription_key":"ai-tenant-e2e-shared-a-6d6384/e2e-rate-iso-a-68c3c6@ai-tenant-e2e-shared-a-6d6384/rate-test-model-6d6384","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6d6384","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c3c6","namespace":"ai-tenant-e2e-shared-a-6d6384","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69077c28-4cb0-41e6-b68e-33607d3a3275","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49500","PortSpecifier":{"PortValue":49500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcae20c8-a75f-9195-9971-60df0572e9e2","method":"POST","path":"/ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498/v1/completions","host":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49500","PortSpecifier":{"PortValue":49500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783725682,"nanos":602149468},"http":{"id":"fcae20c8-a75f-9195-9971-60df0572e9e2","method":"POST","headers":{":authority":"e2e-shared-b-02c498.apps.60232dcb-7162-4ac3-99ad-9ff79dbb66cf.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bDlgIpSooayg9Ey6_Jxwr70kEwY17XdMiQPzXPOuTOxR9gtqxzzzOCTQtJk4"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bDlgIpSooayg9Ey6_Jxwr70kEwY17XdMiQPzXPOuTOxR9gtqxzzzOCTQtJk4\"}"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8de24ce6-9531-4b52-9917-ac54ce5b7ce3","keyName":"e2e-rate-b-68c3c6","subscription":"e2e-rate-iso-b-68c3c6","tenant":"e2e-shared-b-02c498","userId":"8de24ce6-9531-4b52-9917-ac54ce5b7ce3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498\",\"requestedSubscription\":\"e2e-rate-iso-b-68c3c6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02c498.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-02c498","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-68c3c6","namespace":"ai-tenant-e2e-shared-b-02c498","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-68c3c6"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8de24ce6-9531-4b52-9917-ac54ce5b7ce3","keyName":"e2e-rate-b-68c3c6","selected_subscription":"e2e-rate-iso-b-68c3c6","selected_subscription_key":"ai-tenant-e2e-shared-b-02c498/e2e-rate-iso-b-68c3c6@ai-tenant-e2e-shared-b-02c498/rate-test-model-02c498","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-02c498","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-68c3c6","namespace":"ai-tenant-e2e-shared-b-02c498","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcae20c8-a75f-9195-9971-60df0572e9e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9a8b5fa76724eca5f16a0cc7fdb3448dc88f2e047206f43c80343bee64219d"}
{"level":"info","ts":"2026-07-10T23:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd37ee41e4843be9377fb397758b52d2c8fdd61342f43ac136055fdf2542393"}
{"level":"info","ts":"2026-07-10T23:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2af58d11d8c9a592915bb1d201061e438ae3134bb35c1ee7435611a80693391"}
{"level":"info","ts":"2026-07-10T23:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/102082aea09b667d6342c1d9839d9211a82e9e766d8d32fdad5a1d664db2a73c"}
{"level":"info","ts":"2026-07-10T23:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7afb805d7e77c85427436bb989784a12c44d37628a7160f1441e488b09c10ada"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7641e8f5de73f17da8ffdbf84abcc32089e5c3910aa5105a90de64e57a8e4509"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13041a1b81458a0830af13e373eb5b244211e66e8622e1973466ff21e9ad9fb1"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7179a39198e569bfb986255d4845cf007a6cd66cfe462b1983139c8eef236235"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e946101d275567a409d18ce9a719fecf8ba4e2ea56ba859bbd163c639976f25"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13926a1da367c3b5c48d6c0177859185d57784cf83e0e5e1d4388c1e4c2df4c"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de69449d8e42e1c8f6b79823cf41a55034b02290f90476b6473b7e9fd02c74e0"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a562f702c8655df22be1082955bd6c176ff5065c45cb4c5fdfae2d510b269adf"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d0a6c4c5ce000995e55a0a661fbe305f87e856515745b17f771d18c07207cf"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e5c6d52adcd82b0687873e88e14cbe068e709b2597cd16439daaf9a0dca70e5"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cc4be9e1cef6dbee0eeac7a0d871b7620fee5f3cea327952fb4d62dcfdf3d5e"}
{"level":"info","ts":"2026-07-10T23:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3a9579b8f935a291d6fe55499d4bea8eaff809d5df7f13c705a7070b49e48e6"}
{"level":"info","ts":"2026-07-10T23:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/132a649796981eb2d84e8a4bb2efeb5801f522e1928eeff865a73e0b23328771"}
{"level":"info","ts":"2026-07-10T23:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8034260afab85413d6140dfb0658f64c305c32fa8f2abdfadc8dfaad64ff544"}
{"level":"info","ts":"2026-07-10T23:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e73dab979fc3f58954c52ac55b7927178fd10e1e825ee674a09b4bdf7aa0876"}
{"level":"info","ts":"2026-07-10T23:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ebd2b5d7aa8507bc575c3cb03af703eabf8f5e87cddaf4581bcd07d4c16c8d"}
{"level":"info","ts":"2026-07-10T23:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13a7c4f29df05a478d9a633b4ab45a84f6f6a336d4922f86cc77eea037e976c7"}
{"level":"info","ts":"2026-07-10T23:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/411aebecc3c88fab375c944d43b2f318b00ee6293387e3248c74f15c1ff48c50"}
{"level":"info","ts":"2026-07-10T23:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6252795c1e996542d8a1e9eb1b035d005934eac5d236af3bf921af8455f8371b"}
{"level":"info","ts":"2026-07-10T23:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7db040416265a786134d46492a4395a2d628c91e42f16f745cfbf44d94ddf65"}