--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45096394-94a5-4b43-b5de-033a8694bcfd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624656,"nanos":480488463},"http":{"id":"45096394-94a5-4b43-b5de-033a8694bcfd","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45096394-94a5-4b43-b5de-033a8694bcfd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624656,"nanos":515921669},"http":{"id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3dc592b-b52d-4c4d-ada8-e711bb7c5128","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53962","PortSpecifier":{"PortValue":53962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a320043-ef17-4d86-95d4-8e9393b98690","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53962","PortSpecifier":{"PortValue":53962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624656,"nanos":553720739},"http":{"id":"1a320043-ef17-4d86-95d4-8e9393b98690","method":"GET","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14XxCBt6hNLyW1712_fIpkLoUTombBfbgNgLTTxc7YabSqJgP8oOyQ3zmwXvR"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14XxCBt6hNLyW1712_fIpkLoUTombBfbgNgLTTxc7YabSqJgP8oOyQ3zmwXvR\"}"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00b7b9e1-035f-4ca1-9b60-f0be934977ac","keyName":"e2e-auth-iso-a-3c68f1","subscription":"e2e-auth-iso-c53902","tenant":"e2e-shared-a-824408","userId":"00b7b9e1-035f-4ca1-9b60-f0be934977ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c53902"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a320043-ef17-4d86-95d4-8e9393b98690","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"error","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"error","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33752","PortSpecifier":{"PortValue":33752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33752","PortSpecifier":{"PortValue":33752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624675,"nanos":814783036},"http":{"id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a93627f7-6a50-47ce-8712-fe83aa4eca39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52726","PortSpecifier":{"PortValue":52726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52726","PortSpecifier":{"PortValue":52726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624675,"nanos":863072465},"http":{"id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74775a69-c48d-4b1e-96bb-0bf1ebb2e13b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18db792e-999a-4545-9e69-441880c2129c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18db792e-999a-4545-9e69-441880c2129c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18db792e-999a-4545-9e69-441880c2129c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624675,"nanos":900735662},"http":{"id":"18db792e-999a-4545-9e69-441880c2129c","method":"GET","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18db792e-999a-4545-9e69-441880c2129c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OilX0ZFykt5AJ6g4_nr68GSGIDDcQAueMoLyWoeZi7dNreOb5pbuUJ0JNq28"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18db792e-999a-4545-9e69-441880c2129c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OilX0ZFykt5AJ6g4_nr68GSGIDDcQAueMoLyWoeZi7dNreOb5pbuUJ0JNq28\"}"}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18db792e-999a-4545-9e69-441880c2129c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18db792e-999a-4545-9e69-441880c2129c","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18db792e-999a-4545-9e69-441880c2129c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"18db792e-999a-4545-9e69-441880c2129c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18db792e-999a-4545-9e69-441880c2129c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-21T09:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18db792e-999a-4545-9e69-441880c2129c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-21T09:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"error","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:04:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60696","PortSpecifier":{"PortValue":60696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60696","PortSpecifier":{"PortValue":60696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624695,"nanos":255091897},"http":{"id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55acfc6-0206-4f05-8a39-3e4f966ddeee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37776","PortSpecifier":{"PortValue":37776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37776","PortSpecifier":{"PortValue":37776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624695,"nanos":317654138},"http":{"id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb4232d8-f1e6-4e3f-beb7-eda9c8ea9f58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60702","PortSpecifier":{"PortValue":60702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60702","PortSpecifier":{"PortValue":60702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624695,"nanos":354519910},"http":{"id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3a46f1-3831-4dcf-98b0-748c0a5b9364","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb83156b-2ee9-4354-a360-0144a919211a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37782","PortSpecifier":{"PortValue":37782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb83156b-2ee9-4354-a360-0144a919211a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb83156b-2ee9-4354-a360-0144a919211a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37782","PortSpecifier":{"PortValue":37782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624695,"nanos":404883733},"http":{"id":"fb83156b-2ee9-4354-a360-0144a919211a","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb83156b-2ee9-4354-a360-0144a919211a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb83156b-2ee9-4354-a360-0144a919211a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb83156b-2ee9-4354-a360-0144a919211a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb83156b-2ee9-4354-a360-0144a919211a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb83156b-2ee9-4354-a360-0144a919211a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"error","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b438aae-55d6-4783-959c-0589d69dda82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60878","PortSpecifier":{"PortValue":60878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b438aae-55d6-4783-959c-0589d69dda82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b438aae-55d6-4783-959c-0589d69dda82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60878","PortSpecifier":{"PortValue":60878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624714,"nanos":772785316},"http":{"id":"8b438aae-55d6-4783-959c-0589d69dda82","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b438aae-55d6-4783-959c-0589d69dda82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b438aae-55d6-4783-959c-0589d69dda82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b438aae-55d6-4783-959c-0589d69dda82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b438aae-55d6-4783-959c-0589d69dda82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b438aae-55d6-4783-959c-0589d69dda82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721d2396-d316-4503-be71-367b69f50362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55568","PortSpecifier":{"PortValue":55568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"721d2396-d316-4503-be71-367b69f50362","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721d2396-d316-4503-be71-367b69f50362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55568","PortSpecifier":{"PortValue":55568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624714,"nanos":807870450},"http":{"id":"721d2396-d316-4503-be71-367b69f50362","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"721d2396-d316-4503-be71-367b69f50362","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"721d2396-d316-4503-be71-367b69f50362","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721d2396-d316-4503-be71-367b69f50362","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721d2396-d316-4503-be71-367b69f50362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721d2396-d316-4503-be71-367b69f50362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55572","PortSpecifier":{"PortValue":55572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","method":"GET","path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55572","PortSpecifier":{"PortValue":55572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624714,"nanos":841815983},"http":{"id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","method":"GET","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab87f202-50b3-40f5-a2f2-308f4a17bdb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60890","PortSpecifier":{"PortValue":60890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","method":"GET","path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60890","PortSpecifier":{"PortValue":60890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624714,"nanos":874260207},"http":{"id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","method":"GET","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7381a583-6dc6-4c59-9b6b-ffc12f351b8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e0b3052-b8ee-41f6-bc2c-da8b0bb8ed4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"debug","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"error","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"error","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"error","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36604","PortSpecifier":{"PortValue":36604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2b605d6-6ddd-4298-85a7-84045e87a407","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36604","PortSpecifier":{"PortValue":36604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624736,"nanos":351520553},"http":{"id":"d2b605d6-6ddd-4298-85a7-84045e87a407","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2b605d6-6ddd-4298-85a7-84045e87a407","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69467f76-a11e-4359-9a05-76bb06748030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52498","PortSpecifier":{"PortValue":52498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69467f76-a11e-4359-9a05-76bb06748030","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69467f76-a11e-4359-9a05-76bb06748030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52498","PortSpecifier":{"PortValue":52498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624736,"nanos":388099640},"http":{"id":"69467f76-a11e-4359-9a05-76bb06748030","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69467f76-a11e-4359-9a05-76bb06748030","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69467f76-a11e-4359-9a05-76bb06748030","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/auth-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69467f76-a11e-4359-9a05-76bb06748030","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69467f76-a11e-4359-9a05-76bb06748030","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69467f76-a11e-4359-9a05-76bb06748030","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36620","PortSpecifier":{"PortValue":36620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36620","PortSpecifier":{"PortValue":36620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624736,"nanos":422343383},"http":{"id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11MZmH0WzhTZEFq4C_F26tznp9McO37v5SKwAjvHDs7H9EK4Wjt68UY1GJBQG"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11MZmH0WzhTZEFq4C_F26tznp9McO37v5SKwAjvHDs7H9EK4Wjt68UY1GJBQG\"}"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce8d5592-d98b-4339-8abf-607266664312","keyName":"e2e-auth-iso-a-f0c998","subscription":"e2e-auth-iso-edf685","tenant":"e2e-shared-a-824408","userId":"ce8d5592-d98b-4339-8abf-607266664312","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/auth-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-edf685"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b93ccaec-b671-43a7-bb32-ded4a33d9deb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30eb781f64a5c60b6980d431541f021b887b34bb476996b8dcb60fd346237ec"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ec2dcf97c0cc01f0fb38161f8c0afd6fa56f387e29360b128b6db8160a748f"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f489e22be7ca4464a72f60a99ea4953f365c66b748ef74c70473c2acfe1ac65"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd2e82811194b06130fc6ead7aa522059381683d2136aadf7c4a795888808f7"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf8ee57a2992a88fb69c8a1a69135b6a3aedd3a349c9de44e3514d8fa328a11"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f634487877b278a06b30f37c2f7c2c1c1aa6762b63c5339f3774efbb3d1eec4"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048c78ee8f399c9e6873a44aa1b503315f8d69e99769236a1a3e597f6bd0ffe2"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f973574c31a564be0522e5f441fdd8d301de634789b85130c18917cf8c76f7d3"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39f8d53b17dd773f81ba7cdbfaecedb2bca9f91698c2aeea0aaba97782b5749e"}
{"level":"info","ts":"2026-07-21T09:05:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb79be377bd18760e831eba09ad21bc2cd7f9111a28871650cb1b47d97ff9195"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40fbbc7d93918f79444d7bbb19d7b044b9de3f5fdee9ae8c091910509ea26c8d"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de7b26f46df5cfb2806f672c54ae9bc297e458de986acdc27a7627584de2075"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c17281674850f702b0d425306e933520f8f563e51b753c9b337f75e31770a34f"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1825a1a9c3f294e4d78e3963e02b166d15f24f6e3a31e58ce4fc4517ea1e82c"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c52a434ddc659cc22100da412ae0c189e95ca96235ba7bfe698708a6ee77a10"}
{"level":"info","ts":"2026-07-21T09:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24d969cfc365203e3bb8685918a11acf55352afbedaa851e3f04d05058d7b422"}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"}
{"level":"debug","ts":"2026-07-21T09:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19"}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19"}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"error","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44538","PortSpecifier":{"PortValue":44538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44538","PortSpecifier":{"PortValue":44538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624800,"nanos":273677979},"http":{"id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/sub-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ac44bf-5b35-4ddd-853a-1695cbc18742","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36762","PortSpecifier":{"PortValue":36762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a955ec2d-4220-420f-a246-84ff4fcc1482","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36762","PortSpecifier":{"PortValue":36762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624800,"nanos":314504211},"http":{"id":"a955ec2d-4220-420f-a246-84ff4fcc1482","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a955ec2d-4220-420f-a246-84ff4fcc1482","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44542","PortSpecifier":{"PortValue":44542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44542","PortSpecifier":{"PortValue":44542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624800,"nanos":349867869},"http":{"id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","method":"GET","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UsuYtdN8RWYHiViR_HbMyWiAwOYEgeCJxztTPwvIfFK8y6fIGfU5avpmBAJf"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UsuYtdN8RWYHiViR_HbMyWiAwOYEgeCJxztTPwvIfFK8y6fIGfU5avpmBAJf\"}"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"06968efd-4b4b-4266-b192-712e0be661b4","keyName":"e2e-sub-iso-9e9bf5","subscription":"e2e-a-only-a8cbd7","tenant":"e2e-shared-a-824408","userId":"06968efd-4b4b-4266-b192-712e0be661b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/sub-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a8cbd7"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045b7813-f7db-4c98-9763-0f5e0bbd7025","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3435ca86-65b3-4de5-8799-2523771e1f1e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624800,"nanos":389836855},"http":{"id":"3435ca86-65b3-4de5-8799-2523771e1f1e","method":"GET","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Tt7kFjkZkkOh4hOD_QzviVGXjIWLXr4XKAohJmLbiv1vwj7MmPa9NbGw5PCQ"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Tt7kFjkZkkOh4hOD_QzviVGXjIWLXr4XKAohJmLbiv1vwj7MmPa9NbGw5PCQ\"}"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277ef602-4abb-4cab-87ca-2a1364ec5e56","keyName":"e2e-sub-iso-277523","subscription":"e2e-b-only-a8cbd7","tenant":"e2e-shared-b-26961c","userId":"277ef602-4abb-4cab-87ca-2a1364ec5e56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a8cbd7"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3435ca86-65b3-4de5-8799-2523771e1f1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38582","PortSpecifier":{"PortValue":38582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caf76eb6-72ae-4131-a458-68bebc216f74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38582","PortSpecifier":{"PortValue":38582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624818,"nanos":969038095},"http":{"id":"caf76eb6-72ae-4131-a458-68bebc216f74","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/sub-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caf76eb6-72ae-4131-a458-68bebc216f74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":2925810},"http":{"id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd0e9b-a86b-4818-a66d-7e618a76f1f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73ea3d65-d1b7-498f-88cd-931a35955284","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":35674006},"http":{"id":"73ea3d65-d1b7-498f-88cd-931a35955284","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NZ7wHIHy72h0TwFP_dll4r5hGW56ABUb9zgQuoVJa4NgRAiBmSLfwv8yD0MG"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NZ7wHIHy72h0TwFP_dll4r5hGW56ABUb9zgQuoVJa4NgRAiBmSLfwv8yD0MG\"}"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98dc698-79ea-4273-b813-135af64b13a6","keyName":"e2e-sub-iso-78f80c","subscription":"e2e-shared-sub-0a00e5","tenant":"e2e-shared-a-824408","userId":"d98dc698-79ea-4273-b813-135af64b13a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/sub-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a00e5"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ea3d65-d1b7-498f-88cd-931a35955284","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d761e15-4249-4ea4-8946-556d2f075ed9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37050","PortSpecifier":{"PortValue":37050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624819,"nanos":67367429},"http":{"id":"8d761e15-4249-4ea4-8946-556d2f075ed9","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11FMZ76yzyyZi9Tv6_ZWeqHuLVugNRJXuzyQKSTQ2fYSE6uncaqbJv1aeXtGP"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11FMZ76yzyyZi9Tv6_ZWeqHuLVugNRJXuzyQKSTQ2fYSE6uncaqbJv1aeXtGP\"}"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a02c457-a258-4596-a370-baff26559583","keyName":"e2e-sub-iso-5035c5","subscription":"e2e-shared-sub-0a00e5","tenant":"e2e-shared-b-26961c","userId":"8a02c457-a258-4596-a370-baff26559583","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/sub-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0a00e5"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d761e15-4249-4ea4-8946-556d2f075ed9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ea7d958c397073af3dda7c976d12b420f144bf9fde0afcca30ee7c0725e3a2c"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d2e0dedeeada7c40487657d70a24302724d1404afa3b6d58d3953b5f173b82a"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c14a8852664fae293a1466a35d279ac0443dd14e30cfacf5f3fcada1b5212bd1"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5697b5224d4a96c2725b7aab31a70b6f785761a37c1571732e807d9340beeae2"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58e40476640921e69e88a87dd7790ef62bce1e167cb2ead575eb137ad2413c98"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae95c68f5bd217220e858a5872f0456361be8345a9207980cb4e5058297bd60"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:07:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85a7820e7be64feeca1ae9c02f1c3779d9bf6cb31c418da896193b47072302bd"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33446b7762a35970a93fb9bec5cecbc8f8800f5f96bf197208508617435f51e5"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8472afaf30f09c37b30e794406176b9610c8e0cd1c9e80c6c2970be6cbd1de"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e370f4898d41c68dd62e4a5c2ceb77e60b75352b2cb9befd90380c1386668387"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fe3c90e9beadc5c2a9016075670db4dc11b4c7b477ef534f389261fcf04fc20"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2daec0a2f46a7dc5f67b2fbad35a7b0ccbf5009f3d34a8a279d7117327a62e60"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f94222efdb0922b44ca271644acd130e44c9c05cb633af75d9ca18db114b81e5"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c704b879bdd342ed2732c6db46c8f0da479f22eed05578ee6e051109dc628070"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1178374de50de153969511cac6876c57575a2e8e7333cee8e93808244fc64a19"}
{"level":"info","ts":"2026-07-21T09:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9b29f99969fd3f9b7cca48357542ad5709fab77bb38f78f0965831b5b4952d6"}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"error","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"}
{"level":"info","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T09:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"}
{"level":"error","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T09:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39212","PortSpecifier":{"PortValue":39212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c3f408a-5147-4385-a5d5-8dda13910556","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39212","PortSpecifier":{"PortValue":39212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":211715591},"http":{"id":"3c3f408a-5147-4385-a5d5-8dda13910556","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3f408a-5147-4385-a5d5-8dda13910556","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34662","PortSpecifier":{"PortValue":34662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34662","PortSpecifier":{"PortValue":34662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":250191120},"http":{"id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6c2fa66-8c0e-4e7d-9538-613ba81c9a8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39214","PortSpecifier":{"PortValue":39214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39214","PortSpecifier":{"PortValue":39214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624898,"nanos":294973376},"http":{"id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bd2408-55f8-4a8b-8226-1ef7fd5b58ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f85122f7-4cae-4541-953d-703871e99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f85122f7-4cae-4541-953d-703871e99934","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f85122f7-4cae-4541-953d-703871e99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39224","PortSpecifier":{"PortValue":39224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624899,"nanos":363772113},"http":{"id":"f85122f7-4cae-4541-953d-703871e99934","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f85122f7-4cae-4541-953d-703871e99934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f85122f7-4cae-4541-953d-703871e99934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f85122f7-4cae-4541-953d-703871e99934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f85122f7-4cae-4541-953d-703871e99934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f85122f7-4cae-4541-953d-703871e99934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f85122f7-4cae-4541-953d-703871e99934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39232","PortSpecifier":{"PortValue":39232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39232","PortSpecifier":{"PortValue":39232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624900,"nanos":400160656},"http":{"id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JITS4CQsyNhPTwDh_Ubi0TW9OMpPK4OF5eOe953R660tsJ3LWFqE92nXbwvW\"}"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","subscription":"e2e-rate-iso-a-bc08a3","tenant":"e2e-shared-a-824408","userId":"14ccf043-8118-4c53-8c29-2fae4f760981","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-bc08a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc08a3"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14ccf043-8118-4c53-8c29-2fae4f760981","keyName":"e2e-rate-a-bc08a3","selected_subscription":"e2e-rate-iso-a-bc08a3","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-bc08a3@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc08a3","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf8dcbf6-d5f3-434c-bfdf-740f080b0350","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":584393090},"http":{"id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6c7e09-66b7-481c-b0ee-6f18cb181310","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24eccefa-93f2-4e06-93c1-014801014078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33692","PortSpecifier":{"PortValue":33692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24eccefa-93f2-4e06-93c1-014801014078","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24eccefa-93f2-4e06-93c1-014801014078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33692","PortSpecifier":{"PortValue":33692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":626911128},"http":{"id":"24eccefa-93f2-4e06-93c1-014801014078","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24eccefa-93f2-4e06-93c1-014801014078","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"]}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24eccefa-93f2-4e06-93c1-014801014078","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a2be8e4e2682"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9723e757-d5b9-4be3-94e8-9310f968155d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"646187ff-0e40-4311-aebb-db2a8f1a9176","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24eccefa-93f2-4e06-93c1-014801014078","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24eccefa-93f2-4e06-93c1-014801014078","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24eccefa-93f2-4e06-93c1-014801014078","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68417e72-c877-4634-862e-88404741fca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68417e72-c877-4634-862e-88404741fca4","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68417e72-c877-4634-862e-88404741fca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52472","PortSpecifier":{"PortValue":52472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624913,"nanos":663636126},"http":{"id":"68417e72-c877-4634-862e-88404741fca4","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68417e72-c877-4634-862e-88404741fca4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68417e72-c877-4634-862e-88404741fca4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68417e72-c877-4634-862e-88404741fca4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68417e72-c877-4634-862e-88404741fca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68417e72-c877-4634-862e-88404741fca4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68417e72-c877-4634-862e-88404741fca4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38916","PortSpecifier":{"PortValue":38916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"243d2372-d851-4070-8e88-6c97b76fc3b7","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38916","PortSpecifier":{"PortValue":38916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624914,"nanos":702372846},"http":{"id":"243d2372-d851-4070-8e88-6c97b76fc3b7","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"243d2372-d851-4070-8e88-6c97b76fc3b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ab97fd2-fa77-414d-851e-262c8614688e","method":"POST","path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions","host":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624915,"nanos":744245995},"http":{"id":"4ab97fd2-fa77-414d-851e-262c8614688e","method":"POST","headers":{":authority":"e2e-shared-a-824408.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-824408/rate-test-model-824408/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EEwaWlFqzXAzMNc3_hwMqgQdcHKXxZZRPbUCSwtvLPvrbOwy1BJcxcLfvnOe\"}"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","subscription":"e2e-rate-iso-a-ca8c89","tenant":"e2e-shared-a-824408","userId":"5409df98-4f08-4bc1-b666-c1235b456d5e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\",\"requestedSubscription\":\"e2e-rate-iso-a-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-824408.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-824408/rate-test-model-824408\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-824408/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca8c89"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5409df98-4f08-4bc1-b666-c1235b456d5e","keyName":"e2e-rate-a-ca8c89","selected_subscription":"e2e-rate-iso-a-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-a-824408/e2e-rate-iso-a-ca8c89@ai-tenant-e2e-shared-a-824408/rate-test-model-824408","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-824408","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca8c89","namespace":"ai-tenant-e2e-shared-a-824408","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-824408/rate-test-model-824408"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab97fd2-fa77-414d-851e-262c8614688e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52556","PortSpecifier":{"PortValue":52556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","method":"POST","path":"/ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c/v1/completions","host":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52556","PortSpecifier":{"PortValue":52556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784624915,"nanos":782220011},"http":{"id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","method":"POST","headers":{":authority":"e2e-shared-b-26961c.apps.af0c2361-e7aa-4d3a-9942-a2be8e4e2682.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RvUcsV0HxvIIjw9q_CsLVmeHqnVz8Ss0I2SKJJZyIRl7FVqgkFueF1EpLqnM"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RvUcsV0HxvIIjw9q_CsLVmeHqnVz8Ss0I2SKJJZyIRl7FVqgkFueF1EpLqnM\"}"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","keyName":"e2e-rate-b-ca8c89","subscription":"e2e-rate-iso-b-ca8c89","tenant":"e2e-shared-b-26961c","userId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\",\"requestedSubscription\":\"e2e-rate-iso-b-ca8c89\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26961c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-26961c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca8c89","namespace":"ai-tenant-e2e-shared-b-26961c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c"}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-26961c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ca8c89"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0fbcf8ee-b184-44f2-94e9-756b4642b14f","keyName":"e2e-rate-b-ca8c89","selected_subscription":"e2e-rate-iso-b-ca8c89","selected_subscription_key":"ai-tenant-e2e-shared-b-26961c/e2e-rate-iso-b-ca8c89@ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-26961c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca8c89","namespace":"ai-tenant-e2e-shared-b-26961c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-26961c/rate-test-model-26961c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T09:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f12f71d-143c-4b8f-8249-0b4f4c88ab23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/463047b56e2cd99fc7113b06422d4ea94de906ff676027905e69749233d33df3"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e054f6e0ea67aecb5814b5d333aca3e4ee3d82fbc0181bffdc3b9d3ffe4b30"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48a1021b19eb61aa62dc89407c99511bea474dca6ca3f1b6e2295bd5250bcb4c"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7323f6eb4ef761f08e4c686c4cf938e04e48b0e01642b0448d692f70d894efc8"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8f13a1972037f5a30962064b0410a1fe9eddc638759c35369c41a2afb7c8cd9"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25cf6b9474fafe28200a188aea48bae22908df8f50ca6451a8f55f5c3376c586"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3febb33a192f420e8415afc748e648061443ea48dcd04049f9a3a98929ffed4c"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90fb1df24cf1622c0771b2b95fc506b0585292847e0dac77389e6a1961ca32cf"}
{"level":"info","ts":"2026-07-21T09:08:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a421eb452d0ccb2d6e2e7e1269eef041a9e5f6f423cdc1b87f2cabe15f06396a"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/842241ad5ff38a47b8687ecc7183a1adc6489183a7e4988b16d05eff76053785"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefc7fec4019703ef7b2699d12281c80a178fec7af214d9fec55017e0997901"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf3c1c05215a9b44bec1c3d70f0394f4d980a988cfc2dd6df36972a06c68e43"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c5f277cab951a25f615e961c0dfa6077013ce91a1e126c1c0dea6f587c0640"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e31b753710ad849fd9acd6671946768e61db869a154456892136447982da9387"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21cc976e117de66570aa44fa628e940ba7f97ea5271bdfc1c26aa924daaa0918"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39bc128de0e969159df6673ad99a2dc91ccf544a94bd30c5ba7128d79c0faef0"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9857e99b12055ebdcee234ce24e63bcdebfa87dd52fe8c112d68424b6c2ad237"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f542930eb3e57d30d04d399d07f5ad3ff16a72b64ce170c970f1b76205f17ddb"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e77eeab04b3f044cee169686d787fb33dd762577dc58c9e7d495b06075473f"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76c691b19c37cc666b7755fb8a286f45a07da92614734c23ac33df43fc6abacc"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466ce71c46c302013b7743690ac72e183a499ea98b2d000de3f0a14e8a0c1b5f"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b301f8798cd1dc57bae59c55529476165a4754e4716ffde701137eab6f710c"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e72d8177bdf4ecf62c6904b9d2242a6cba7f563e0bdaec8ad51b1b08aa2b2"}
{"level":"info","ts":"2026-07-21T09:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75c0d09f45fdb60d55f00da6809d9adc08f739911dcf31a00f9154c253b2d050"}