--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"error","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"error","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a"}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a"}
{"level":"info","ts":"2026-07-09T22:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7449207b8c228ce7d137b807e7ea17d04de3dda2c4fc0ca02bdf09c4ea9be769"}
{"level":"info","ts":"2026-07-09T22:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/657ac7a80777fe5eb30077b340ae6fe7db8e0eba8e273bb27b65b7abffdabcbf"}
{"level":"info","ts":"2026-07-09T22:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be0efdb440b5b9126c07de4f643fb3893aa47ce8501e92f1f0b2732c76f2e88"}
{"level":"info","ts":"2026-07-09T22:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed317e3cd67212262030f94454b3b8b05f17e3615ea328bc91ee779703688524"}
{"level":"info","ts":"2026-07-09T22:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cfa8b84bb973ae73c5d0929bfc11a04d4204afad015b03019f37a38f1054880"}
{"level":"info","ts":"2026-07-09T22:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0708508de651b6e77340c7cef9e8adfa220a0e90d962f27e2f4fa4f53a43538a"}
{"level":"info","ts":"2026-07-09T22:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/705f85cffd557e496e342268259aa9136f4741867b0d85167861816ba9439c31"}
{"level":"info","ts":"2026-07-09T22:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ac285ea55f0f52060983109c55c5975e9fb77e2abb9786ef4c8ce9599216839"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:56:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"error","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6"}
{"level":"info","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"error","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"}
{"level":"error","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50642","PortSpecifier":{"PortValue":50642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50642","PortSpecifier":{"PortValue":50642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637830,"nanos":243651729},"http":{"id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc2ededc-02a7-451f-a63a-0a00e4e9f81c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4025149b-c412-451d-b87b-8863b0c310ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60754","PortSpecifier":{"PortValue":60754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4025149b-c412-451d-b87b-8863b0c310ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4025149b-c412-451d-b87b-8863b0c310ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60754","PortSpecifier":{"PortValue":60754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637830,"nanos":307617732},"http":{"id":"4025149b-c412-451d-b87b-8863b0c310ea","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4025149b-c412-451d-b87b-8863b0c310ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4025149b-c412-451d-b87b-8863b0c310ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4025149b-c412-451d-b87b-8863b0c310ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4025149b-c412-451d-b87b-8863b0c310ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4025149b-c412-451d-b87b-8863b0c310ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50644","PortSpecifier":{"PortValue":50644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec8f4860-d679-4214-8c2d-3b48449112ab","method":"GET","path":"/maas-api/v1/api-keys/94f367e0-4f9f-4270-a8be-e62d567be68b","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50644","PortSpecifier":{"PortValue":50644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637830,"nanos":369293031},"http":{"id":"ec8f4860-d679-4214-8c2d-3b48449112ab","method":"GET","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94f367e0-4f9f-4270-a8be-e62d567be68b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94f367e0-4f9f-4270-a8be-e62d567be68b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec8f4860-d679-4214-8c2d-3b48449112ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60756","PortSpecifier":{"PortValue":60756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","method":"GET","path":"/maas-api/v1/api-keys/6edbfe1b-62c2-4b85-9939-378ab06ce317","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60756","PortSpecifier":{"PortValue":60756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637830,"nanos":409296350},"http":{"id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","method":"GET","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6edbfe1b-62c2-4b85-9939-378ab06ce317",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6edbfe1b-62c2-4b85-9939-378ab06ce317",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fa94be-21fd-4cd7-aabb-8e00d08a5e7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637849,"nanos":634663919},"http":{"id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b00d938-bb85-4fdc-8ee4-eb0818bfb977","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637849,"nanos":672371753},"http":{"id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cdc8c5c-5ee3-4019-9ab7-72664d01e0a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59892","PortSpecifier":{"PortValue":59892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59892","PortSpecifier":{"PortValue":59892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637849,"nanos":709605149},"http":{"id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","method":"GET","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JjMTzwt3PSby2t28_gGTSYNd5Bb3aQTvl5mNcbU5AdNBZI11v8DY5dj39iU0"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JjMTzwt3PSby2t28_gGTSYNd5Bb3aQTvl5mNcbU5AdNBZI11v8DY5dj39iU0\"}"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bad8938-1844-4d3e-9a75-c13c635d71fd","keyName":"e2e-auth-iso-a-a71cba","subscription":"e2e-auth-iso-1e6778","tenant":"e2e-shared-a-8a6043","userId":"4bad8938-1844-4d3e-9a75-c13c635d71fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1e6778"}
{"level":"info","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39fab73d-c299-4e2e-be8b-86d7d15a29e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42866","PortSpecifier":{"PortValue":42866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42866","PortSpecifier":{"PortValue":42866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637868,"nanos":912435373},"http":{"id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e4747f1-4b21-4b78-88cd-c774dac40fc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637868,"nanos":950527976},"http":{"id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6bda0ec-5a98-4d0c-beb7-cabb23558bb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637868,"nanos":995694968},"http":{"id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","method":"GET","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10SrQl5zYMCJS14AC_EyYyzIavPgbfTk4gTJ6h03KNJFRp8BEkQM6U07KXulx"}
{"level":"debug","ts":"2026-07-09T22:57:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10SrQl5zYMCJS14AC_EyYyzIavPgbfTk4gTJ6h03KNJFRp8BEkQM6U07KXulx\"}"}
{"level":"debug","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T22:57:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbf9bbcb-71c2-4467-9919-6e5ad8a80539","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44716","PortSpecifier":{"PortValue":44716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3733741-5f7d-4de6-bfdc-91285f688284","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44716","PortSpecifier":{"PortValue":44716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637886,"nanos":130228181},"http":{"id":"d3733741-5f7d-4de6-bfdc-91285f688284","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3733741-5f7d-4de6-bfdc-91285f688284","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34578","PortSpecifier":{"PortValue":34578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34578","PortSpecifier":{"PortValue":34578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637886,"nanos":170570733},"http":{"id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5a1c85-91ce-4834-b2ee-8ea4246e1f2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637886,"nanos":204864874},"http":{"id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb06cfe-147f-4844-839f-6702b95ef8d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34592","PortSpecifier":{"PortValue":34592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34592","PortSpecifier":{"PortValue":34592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637886,"nanos":245479413},"http":{"id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff37046-ec4a-4b7e-ab7c-cdb164c9443c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52322","PortSpecifier":{"PortValue":52322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52322","PortSpecifier":{"PortValue":52322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637903,"nanos":390556898},"http":{"id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbebf9aa-658c-4dd0-b818-89bf56e7e641","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59058","PortSpecifier":{"PortValue":59058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75cd027d-d1de-4b6e-9322-e798df84b586","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59058","PortSpecifier":{"PortValue":59058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637903,"nanos":434650794},"http":{"id":"75cd027d-d1de-4b6e-9322-e798df84b586","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75cd027d-d1de-4b6e-9322-e798df84b586","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","method":"GET","path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637903,"nanos":467530317},"http":{"id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","method":"GET","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35bcf799-a7ae-4382-9bc3-3fdc8f6d4391","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52336","PortSpecifier":{"PortValue":52336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95508ceb-e18f-4578-8188-b36a6a50589f","method":"GET","path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52336","PortSpecifier":{"PortValue":52336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637903,"nanos":502400318},"http":{"id":"95508ceb-e18f-4578-8188-b36a6a50589f","method":"GET","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf7ae8a-7df7-4372-9b66-a8698e317899",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95508ceb-e18f-4578-8188-b36a6a50589f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49166","PortSpecifier":{"PortValue":49166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49166","PortSpecifier":{"PortValue":49166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637920,"nanos":594840516},"http":{"id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a29cdfd-24eb-4397-bc99-71af67d1c610","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637920,"nanos":632944625},"http":{"id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/auth-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cae3971-6d3f-489f-bc8e-4e19513025c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49178","PortSpecifier":{"PortValue":49178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3903214c-4251-46f3-9ccb-48e631a432b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49178","PortSpecifier":{"PortValue":49178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637920,"nanos":665188645},"http":{"id":"3903214c-4251-46f3-9ccb-48e631a432b4","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kfr6SUxdlGIRvIu7_RzbS3ncruUIuUcONzP2yevQ0rIPLv8eiAL9bnI8Kp9q"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kfr6SUxdlGIRvIu7_RzbS3ncruUIuUcONzP2yevQ0rIPLv8eiAL9bnI8Kp9q\"}"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63987eb6-f38c-433b-9e6e-c0622e13d064","keyName":"e2e-auth-iso-a-0b8bc9","subscription":"e2e-auth-iso-edc73e","tenant":"e2e-shared-a-8a6043","userId":"63987eb6-f38c-433b-9e6e-c0622e13d064","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/auth-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-edc73e"}
{"level":"info","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3903214c-4251-46f3-9ccb-48e631a432b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a6ac839232b4d8c56b1b44c17f3251261f13969598d9bddb581d695c317a631"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44d7a73142974bc82ffe27cfda1e3475eb6f6836811afcb305a57ec0721fe6bf"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad50a2378fbc9e06c7d94418b3d58cad46a65a61f30227a05205f1734ac461f"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2bc31808bff1467f52f2bf8eb8c878f2f51f3ece0499df206e5978ac173aa6d"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98f0ba7766a3b95732c6be80d0ae62ae89d10dc9c6006cbd776ea8c1060f9c83"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d54acbecc0ae11160401eb4b1e664893e8bd5d0486c88fde7d7b843249748b87"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1098d3817dc7f4274409b7aed01a94b656645da9b949c00284b25a385812337f"}
{"level":"info","ts":"2026-07-09T22:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85f5ebb01732078a2b72229946e9329ae8ea91e925de1ba4029471827845bdbd"}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"info","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"debug","ts":"2026-07-09T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"error","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"error","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e95b6c8c22f92e461c156f352a73dbb4c6e4ca0e4ae0575eada8fd4341cebad0"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c92c246682149f078d13cde2b33f09b075fa874ce7d205b1b989efee80564d08"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80d0305b15f3bc1d5b32ccc242edd9933bc1db3574578cffda8153a8adcd20c6"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/087fa681d65c91e0dbe001eb0cd22c7a71654a3f48a10a1071e88b9eb66d9af8"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87c0bb1bf173b9bee5eb14e21bd59d20d4dfb0e1c89840e9fc33e9e7a055e940"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865b7195d354e35455a789aa39048b63c496e3ce929aadb2c7b8f4a7d300a1c4"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c38546f5c1f46854b800dcac201b9912e6fcf4238baef172ae339fdd24e91ddd"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd14d6bfe8105a861d4fb0756fcfc05f66197327d626b74b53f5f3413a88c827"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"error","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e"}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e"}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8"}
{"level":"error","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T22:59:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"debug","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637976,"nanos":355177263},"http":{"id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/sub-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0396d2-0f83-4d66-ad0f-87ef9c8fe9b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60142","PortSpecifier":{"PortValue":60142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81e13e5f-65d9-4453-a77b-19b57b88761a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60142","PortSpecifier":{"PortValue":60142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637976,"nanos":396111999},"http":{"id":"81e13e5f-65d9-4453-a77b-19b57b88761a","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/sub-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e13e5f-65d9-4453-a77b-19b57b88761a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51126","PortSpecifier":{"PortValue":51126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df238bee-2d5b-4c92-a72b-d7c012090dae","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51126","PortSpecifier":{"PortValue":51126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637976,"nanos":435868491},"http":{"id":"df238bee-2d5b-4c92-a72b-d7c012090dae","method":"GET","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aEi0IJkYMfYmNSAO_5v7TnFsUCYcjyaEFhvutOZRsM1I0dvyAUOb1H3IO4Cd"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aEi0IJkYMfYmNSAO_5v7TnFsUCYcjyaEFhvutOZRsM1I0dvyAUOb1H3IO4Cd\"}"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37070705-633a-4e98-af09-1a028df87c1f","keyName":"e2e-sub-iso-dd4fe0","subscription":"e2e-a-only-4c406a","tenant":"e2e-shared-a-8a6043","userId":"37070705-633a-4e98-af09-1a028df87c1f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/sub-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-4c406a"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df238bee-2d5b-4c92-a72b-d7c012090dae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637976,"nanos":466145718},"http":{"id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","method":"GET","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XS9CYCZ7vOJUb5sR_cOskuU7qKwmlWm2bcniWvutflmK1lXzh7cqymEuP9Fx"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XS9CYCZ7vOJUb5sR_cOskuU7qKwmlWm2bcniWvutflmK1lXzh7cqymEuP9Fx\"}"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3bca835-c4e7-455c-a185-95a92204c3a4","keyName":"e2e-sub-iso-32a466","subscription":"e2e-b-only-4c406a","tenant":"e2e-shared-b-862c5d","userId":"d3bca835-c4e7-455c-a185-95a92204c3a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/sub-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-4c406a"}
{"level":"info","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"140446a0-ac5f-4807-a4ee-99b12ea3f875","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3374ee84-5e2f-4850-9280-95031dfcd394","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637986,"nanos":460453065},"http":{"id":"3374ee84-5e2f-4850-9280-95031dfcd394","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/sub-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3374ee84-5e2f-4850-9280-95031dfcd394","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ff273b-0265-4501-a430-2a44b5a65355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40666","PortSpecifier":{"PortValue":40666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06ff273b-0265-4501-a430-2a44b5a65355","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ff273b-0265-4501-a430-2a44b5a65355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40666","PortSpecifier":{"PortValue":40666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637986,"nanos":494831648},"http":{"id":"06ff273b-0265-4501-a430-2a44b5a65355","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06ff273b-0265-4501-a430-2a44b5a65355","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06ff273b-0265-4501-a430-2a44b5a65355","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/sub-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ff273b-0265-4501-a430-2a44b5a65355","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ff273b-0265-4501-a430-2a44b5a65355","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ff273b-0265-4501-a430-2a44b5a65355","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38246","PortSpecifier":{"PortValue":38246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38246","PortSpecifier":{"PortValue":38246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637986,"nanos":530692520},"http":{"id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM28aG6ptVf8dFXE_MZrVLCycy5JAM75UY6n1dTDpCM8C1W2LJQ0GZDqn1yG"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM28aG6ptVf8dFXE_MZrVLCycy5JAM75UY6n1dTDpCM8C1W2LJQ0GZDqn1yG\"}"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fdf120b4-1029-4961-ac2c-0ea5b5b3d257","keyName":"e2e-sub-iso-516d2a","subscription":"e2e-shared-sub-2ae9bf","tenant":"e2e-shared-a-8a6043","userId":"fdf120b4-1029-4961-ac2c-0ea5b5b3d257","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/sub-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2ae9bf"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d3915a5-c19f-4833-99f5-cab3f605f9fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783637986,"nanos":564069431},"http":{"id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vuMwJ86MAM9fNPJP_20dXYlEomWUsab8Uofrrqe69GgP3WfoFeGihrilWuiD"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vuMwJ86MAM9fNPJP_20dXYlEomWUsab8Uofrrqe69GgP3WfoFeGihrilWuiD\"}"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb06ae96-807c-4d20-8b6a-8651d5a4dd55","keyName":"e2e-sub-iso-b34320","subscription":"e2e-shared-sub-2ae9bf","tenant":"e2e-shared-b-862c5d","userId":"cb06ae96-807c-4d20-8b6a-8651d5a4dd55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/sub-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2ae9bf"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b2b762-33d1-475b-a560-7a3b86e4d935","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51b8555ae5831f2bbe52c7454418545dfea822192b412b45d3b44683c5d47351"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b99a99f88a2866d99c32e17f1782be713ce0f422aafdbad282c1b7eaca064ce8"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b56d4c605ea03ca3c3b6b857e9517b26b115f401a49e973b7ee839b87d2ff97"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24316b6e2e41eb524bac99e76888a40dc6d971b6064ddc8068be86c3511ca06e"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5564456d666fd62cc0210d5466de8c0a3db27aa6936316e6322d4bfeb1b6ec2d"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2692bfa90995b030cb92e8f5277e5efcaf2490b71b68db0bb87ee841fb5dd123"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea302147ba1c49a23113a3bdfdc44f772ad731fbe3aa0a0500c0ad76c74d9bfd"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/358183aa77fccce176a3ac425de2ef8b71858d91f34c8344bfa39b56b8d7936a"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634f5faf522f4995976dec35a7425d3b73b6aa2470fcc4482f856dd3c30e6c39"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/998aa3fd2f375fb89caf32a7a1870acef8ae6c01bf874476daa93858533a9ee7"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eba8b68834a462a3b4c4367a2b32e0eb5e98ec2c8074a3605476d7dd21ffa1c"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee43ef36915740396ff040266a3f3ddb4676250944d0fcbee4d6637f9266c164"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f67bcd43aa086b9405bb1ee39ae3ea041eafe377352888312227a411538a2d46"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/688e957e924423a0a42fc36443dffb47f17ba4ccb6c433b13c36d28be1eba060"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0817f91214207e91538e497c00e72fc3331e03606f18fd4d70f23c82d7658de1"}
{"level":"info","ts":"2026-07-09T22:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d550295d4975d52370da25a1b24cc8eba657f04e564fcf6c446310223ae5edd7"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75"}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75"}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb"}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"info","ts":"2026-07-09T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T23:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"debug","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"info","ts":"2026-07-09T23:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb"}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48060","PortSpecifier":{"PortValue":48060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48060","PortSpecifier":{"PortValue":48060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638054,"nanos":374597514},"http":{"id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80ddfba-0ac2-4c6f-aae7-e4eadb743999","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50538","PortSpecifier":{"PortValue":50538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50538","PortSpecifier":{"PortValue":50538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638054,"nanos":418760492},"http":{"id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c9b541-d006-44c6-9ff5-7309a0d24b8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48076","PortSpecifier":{"PortValue":48076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48076","PortSpecifier":{"PortValue":48076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638054,"nanos":459821815},"http":{"id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI\"}"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","subscription":"e2e-rate-iso-a-56a652","tenant":"e2e-shared-a-8a6043","userId":"212175ad-0740-4232-8812-2f4d4b26a8cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-56a652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56a652"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","selected_subscription":"e2e-rate-iso-a-56a652","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-56a652@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bfcd759-4032-453b-8ac0-dcaddf36c372","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48090","PortSpecifier":{"PortValue":48090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"936a4796-b571-42d5-a5da-c30ce1438bec","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48090","PortSpecifier":{"PortValue":48090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638055,"nanos":522279783},"http":{"id":"936a4796-b571-42d5-a5da-c30ce1438bec","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI\"}"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","subscription":"e2e-rate-iso-a-56a652","tenant":"e2e-shared-a-8a6043","userId":"212175ad-0740-4232-8812-2f4d4b26a8cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-56a652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56a652"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","selected_subscription":"e2e-rate-iso-a-56a652","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-56a652@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:00:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936a4796-b571-42d5-a5da-c30ce1438bec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48092","PortSpecifier":{"PortValue":48092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1d08b63-ea85-42e3-9caf-896eef87d502","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48092","PortSpecifier":{"PortValue":48092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638056,"nanos":560105267},"http":{"id":"f1d08b63-ea85-42e3-9caf-896eef87d502","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RLtpdHok3dI3JfmM_TiyJiqlecHmr8Tyw0Zi6nv3pQssckKV5wy59vYlXAPI\"}"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","subscription":"e2e-rate-iso-a-56a652","tenant":"e2e-shared-a-8a6043","userId":"212175ad-0740-4232-8812-2f4d4b26a8cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-56a652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56a652"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"212175ad-0740-4232-8812-2f4d4b26a8cd","keyName":"e2e-rate-a-56a652","selected_subscription":"e2e-rate-iso-a-56a652","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-56a652@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56a652","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d08b63-ea85-42e3-9caf-896eef87d502","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638067,"nanos":604234330},"http":{"id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"690b56da-6139-4f6a-8ed5-a02890d0a5f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37280","PortSpecifier":{"PortValue":37280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03581b2b-d759-43f6-829a-94cb0931fcf9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37280","PortSpecifier":{"PortValue":37280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638067,"nanos":643082301},"http":{"id":"03581b2b-d759-43f6-829a-94cb0931fcf9","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"]}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/12da8f31a80e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d00e1d5-eacf-4bec-b4bd-196fec825962"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6454c1bc-2b60-4ca0-bf56-33e60e84b628","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03581b2b-d759-43f6-829a-94cb0931fcf9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43498","PortSpecifier":{"PortValue":43498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43498","PortSpecifier":{"PortValue":43498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638067,"nanos":682782833},"http":{"id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf\"}"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","subscription":"e2e-rate-iso-a-b13c7e","tenant":"e2e-shared-a-8a6043","userId":"accc07f5-bc21-4da7-b507-9158f1022e61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-b13c7e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b13c7e"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","selected_subscription":"e2e-rate-iso-a-b13c7e","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-b13c7e@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"366c18bb-8676-4085-8ddd-eecc3d96fb9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97405122-def7-42ed-b44b-638303693a62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97405122-def7-42ed-b44b-638303693a62","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97405122-def7-42ed-b44b-638303693a62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638068,"nanos":721902866},"http":{"id":"97405122-def7-42ed-b44b-638303693a62","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97405122-def7-42ed-b44b-638303693a62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf\"}"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","subscription":"e2e-rate-iso-a-b13c7e","tenant":"e2e-shared-a-8a6043","userId":"accc07f5-bc21-4da7-b507-9158f1022e61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97405122-def7-42ed-b44b-638303693a62","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-b13c7e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97405122-def7-42ed-b44b-638303693a62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b13c7e"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97405122-def7-42ed-b44b-638303693a62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","selected_subscription":"e2e-rate-iso-a-b13c7e","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-b13c7e@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97405122-def7-42ed-b44b-638303693a62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97405122-def7-42ed-b44b-638303693a62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43520","PortSpecifier":{"PortValue":43520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","method":"POST","path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions","host":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43520","PortSpecifier":{"PortValue":43520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638069,"nanos":761553334},"http":{"id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","method":"POST","headers":{":authority":"e2e-shared-a-8a6043.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r893vlm2DPZh3IQx_or2DrTdxaLTKXLVE2XMFL2a93qQo8SLp2Ex4KT33pcf\"}"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","subscription":"e2e-rate-iso-a-b13c7e","tenant":"e2e-shared-a-8a6043","userId":"accc07f5-bc21-4da7-b507-9158f1022e61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\",\"requestedSubscription\":\"e2e-rate-iso-a-b13c7e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8a6043.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b13c7e"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"accc07f5-bc21-4da7-b507-9158f1022e61","keyName":"e2e-rate-a-b13c7e","selected_subscription":"e2e-rate-iso-a-b13c7e","selected_subscription_key":"ai-tenant-e2e-shared-a-8a6043/e2e-rate-iso-a-b13c7e@ai-tenant-e2e-shared-a-8a6043/rate-test-model-8a6043","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8a6043","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b13c7e","namespace":"ai-tenant-e2e-shared-a-8a6043","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e511e7-a892-442d-be2d-6ab3d8093dc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37286","PortSpecifier":{"PortValue":37286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","method":"POST","path":"/ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d/v1/completions","host":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37286","PortSpecifier":{"PortValue":37286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783638069,"nanos":813214607},"http":{"id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","method":"POST","headers":{":authority":"e2e-shared-b-862c5d.apps.ca770a01-1e4d-45fb-af01-12da8f31a80e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xl5crLWOmeeD5RUV_Ph8lgxJGj213KQMQONmLi8vSf5OZvPAbUYdUJVtpr2u"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xl5crLWOmeeD5RUV_Ph8lgxJGj213KQMQONmLi8vSf5OZvPAbUYdUJVtpr2u\"}"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1dbff801-77b3-494f-9d12-be89433e79be","keyName":"e2e-rate-b-b13c7e","subscription":"e2e-rate-iso-b-b13c7e","tenant":"e2e-shared-b-862c5d","userId":"1dbff801-77b3-494f-9d12-be89433e79be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d\",\"requestedSubscription\":\"e2e-rate-iso-b-b13c7e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-862c5d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-862c5d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b13c7e","namespace":"ai-tenant-e2e-shared-b-862c5d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b13c7e"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1dbff801-77b3-494f-9d12-be89433e79be","keyName":"e2e-rate-b-b13c7e","selected_subscription":"e2e-rate-iso-b-b13c7e","selected_subscription_key":"ai-tenant-e2e-shared-b-862c5d/e2e-rate-iso-b-b13c7e@ai-tenant-e2e-shared-b-862c5d/rate-test-model-862c5d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-862c5d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b13c7e","namespace":"ai-tenant-e2e-shared-b-862c5d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T23:01:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10ee183-1517-4d2f-b0f3-84334bf9c5fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d6ae9b5c7834b72b4c02e254460e010f2fa02a5b0ea46864694efd0272c0cb"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da910a724a779d07b1b420d880f1879859400bcdbfc523a5a7da6fd76c90d212"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdfaece62965c8825180415205669e4528245797718dd41dca8aabaa720700e4"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc84ccf7571341058701c87d0517d3b4c08d685a9069c61f23f946c6e792ad58"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3300b430156a4c811aa0dc1b82ce698ad0be3ec1fb874dd4423f1f598957d75"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdcfa7807715ec26d58eb30eb11233a2ee362057a66722df1b025d680aa539a8"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0913f41664b9329da870fbb01bebd8573cc6bd45e1a8c356af93fd41660bc5dd"}
{"level":"info","ts":"2026-07-09T23:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c8bcb8f62100393a66d573976367aacfe38e1f2b8846df5a221244478f15be9"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/944087d1e0a6ee74aa65c191c43aa32628108c0c964b3832a2f612751323d56c"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a53375da725421555cf76680f7db1baf9c3cb5d539a5c3f482e237801260cb94"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372ce3cec34a16d3a24c8e6302b96e4f359a9ab740f0bc666842e480179a325d"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42a488777a5b43f861f3b1195f98be5cd6b28473d6c2e94d030d8a65773b45cf"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41dafc42830abb9a80e136486464f9e024772b5dfa2ae47ca2931ebee715b977"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11a9f528ddf503d3df12c27a3db10f589ab196eabcf4c36a2843b1d3724e9648"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac699f1a100fad85dffb259325105049526e6559270ce59d3aa15618de09363e"}
{"level":"info","ts":"2026-07-09T23:01:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f479294199d3998f8ae4df52f1cdb24d1648e3b23849cea8a7d82ea342519113"}
{"level":"info","ts":"2026-07-09T23:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcc85410e588de2dce8ec813b1712218ad5d6ac8ad99f4a342a37381fa9fcc8e"}
{"level":"info","ts":"2026-07-09T23:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930d46d9ee880acd6be84a02926565781540349612faf13f9ae581bb25062569"}
{"level":"info","ts":"2026-07-09T23:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/620c900492c9388980017a7422bc9dfa2077c9a5eb705b85fed8912207f14871"}
{"level":"info","ts":"2026-07-09T23:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0009180acaaf18b52cd2230b8590317f75ffe9dcc5dd70ce7f862200c014cab4"}
{"level":"info","ts":"2026-07-09T23:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6e626119dbd37a04d09d809ece38697c1f6f6ae0bd251b29b07fa826475dd2e"}
{"level":"info","ts":"2026-07-09T23:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef91885ae3982ba3ed51c9a32af17af5ce7df0abdbfd46b674cb75bc44a10585"}
{"level":"info","ts":"2026-07-09T23:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bdee365b56442a7877ab4d91fdd1c13161de36a448d5dd7564abd559f9404f0"}
{"level":"info","ts":"2026-07-09T23:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aace0423cc158b8ddbaed2b79be5051bd8e9eaaf279701ee3c8b557df424d48"}